On the Complexity of Elementary Modal Logics* 



Edith Hemaspaandra and Henning Schnoor 



Department of Computer Science, Rochester Institute of Technology, Rochester, NY 14623, U.S.A. 



Abstract. Modal logics are widely used in computer science. The complexity of 
modal satisfiability problems has been investigated since the 1970s, usually proving 
results on a case-by-case basis. We prove a very general classification for a wide 
class of relevant logics: Many important subclasses of modal logics cam be obtained 
by restricting the allowed models with first-order Horn formulas. We show that the 
satisfiability problem for each of these logics is cither NP-completc or PSPACE-hard, 
and exhibit a simple classification criterion. Further, we prove matching PSPACE 
upper bounds for many of the PSPACE-hard logics. 

1 Introduction 

Modal logics have proven to be a valuable tool in mathematics and computer science. The tra- 
ditional uni- modal logic enriches the propositional language with the operator 0, where 

is interpreted as ip possibly holds. The usual semantics interpret modal formulas over graphs, 
where <)(p means "there is a successor world where <^ is true." In addition to their mathemat- 
ical interest, modal logics are widely used in practical applications: In artificial intelligence, 
modal logic is used to model the knowledge and beliefs of an agent, see e.g. [BZ05]. Modal log- 
ics also can be applied in cryptographic and other protocols [FHJ02,CDF03,HMT88,LR86]. 
For many specific applications, there exist tailor-made variants of modal logics [BG04] . 

Due to the vast number of applications, complexity issues for modal logics are very 
relevant, and have been examined since Ladner's seminal work [Lad77]. Depending on the 
application, modal logics with different properties are studied. For example, one might want 
the formula (p =4> 0<p to be an axiom — if something is true, then it should be considered 
possible. Or OOtp =^ ()ip — if it is possible that (p is possible, then (p itself should be 
possible. Classical results [Sah73] show that there is a close correspondence between modal 
logics defined by axioms and logics obtained by restricting the class of considered graphs. 
Requiring the axioms mentioned above corresponds to restricting the classes of graphs to 
those which are reflexive or transitive, respectively. Determining the complexity of a given 
modal logic, defined cither by the class of considered graphs or via a modal axiom system, 
has been an active line of research since Ladner's results. In particular, the complexity classes 
NP and PSPACE have been at the center of attention. 

Most complexity results have been on a case-by-case basis, proving results for indi- 
vidual logics both for standard modal logics and variations like temporal or hybrid log- 
ics [HM92,Ngu05,SC85]. Examples of more general results include Halpern and Rego's proof 
that logics including the negative introspection axiom, which corresponds to the Euclidean 
graph property, have an NP-complete satisfiability problem [HR07]. In [SP06], Schroder and 
Pattinson show a way to prove PSPACE upper bounds for modal logics defined by modal ax- 
ioms of modal depth 1. In [Lad77], Ladner proved PSPACE-hardness for all logics for which 
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reflexive and transitive graphs are admissible models. In [Spa93], Hemaspaandra showed 
that all normal logics extending S4.3 have an NP-complete satisfiability problem, and work 
on the Guarded Fragment has shown that some classes of modal logics can be seen as a 
decidable fragment of first-order logic [AvBN98]. 

While these results give hardness or upper bounds for classes of logics, they do not 
provide a full case distinction identifying all "easy" or "hard" cases in the considered class. 
We achieve such a result: For a large c;lass of modal logics containing many important 
representatives, we identify all cases which have an NP-complete satisfiability problem, and 
show that the satisfiability problem for all other non-trivial logics in that class is PSPACE- 
hard. Hence these problems avoid the infinitely many complexity c;lasses between NP and 
PSPACE, many of which have natural complete problems arising from logical questions. To 
our knowledge, such a general result has not been achieved before. 

To describe the considered class of modal logics, note that many relevant properties of 
modal models can be expressed by first-order formulas: A graph is transitive if its edge- 
relation R satisfies the clause \lxyz {xRy A yRz => xRz) and symmetric if it satisfies 
yxy{xRy yRx). Many other graph properties can be defined using similar formulas, 
where the presence of a certain pattern of edges in the graph forces the existence of another. 
Analogously to propositional logic, we call conjunctions of such clauses universal Horn for- 
mulas. Many relevant logics can be defined in this way: All examples form [Lad77] fall into 
this category, as well as logics over Euclidean graphs. 

We study the following problem: Given a universal Horn formula ij), what is the com- 
plexity of the modal satisfiability problem over the class of graphs defined by tj}! 

The main results of this paper are the following: First, we identify all cases which give a 
satisfiability problem solvable in NP (which then for every nontrivial logic is NP-complete) , 
and show that all other cases are PSPACE-hard. Second, we prove a generalization of a 
"tree-like model property," and use it to obtain PSPACE upper bounds for a large class of 
logics. As a corollary, we prove that Ladner's classic hardness result is "optimal" in the class 
of logics defined by universal Horn formulas. A further corollary is that in the universal 
Horn c;lasH, all logics whose satisfiability problem is not PSPACE-hard already have the 
"polynomial-size model property," which is only one of several known ways to prove NP 
upper bounds for modal logics. 

Various work was done on restricting the syntax of the modal formulas by restricting 
the propositional operators [BHSS06] , the nesting degree and number of variables [Hal95] or 
considering modal formulas in Horn form [CL94]. While these results are about restricting 
the syntax of the modal formulas, the current work studies different semantics of modal 
logics, where the semantics are specified by Horn formulas. 

The organization of the paper is as follows: In Section 2, we introduce terminology and 
generalize classic complexity results. Section 3 then establishes techniques to restrict the 
size of models for modal formulas, which are important tools for the NP-membership later. 
Section 4 contains the main results of the paper about universal Horn formulas. After intro- 
ducing them in Section 4.1 and proving their relationship to homomorphisms in Section 4.2, 
we prove NP-results for special cases of Horn formulas in Sections 4.3 and 4.4. Using these 
results. Section 4.5 then proves our main dichotomy result, which is Corollary 4.29. The 
remainder of the paper establishes PSPACE upper bounds for many of the PSPACE-hard 
logics. An important tool for these proofs is introduced in Section 4.6, where we show 
a tree-like model property for all PSPACE-hard logics defined by universal Horn formu- 
las. Section 4.7 contains our PSPACE-algorithm, which generalizes many previously known 
algorithms for modal logics. Finally, Section 4.8 obtains a series of corollaries, proving the 
above-mentioned optimality result for Ladner's hardness condition, and exhibiting a number 
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of cases to which our PSPACE-algorithm can be applied. The paper closes with a summary 
and open questions in Section 5. 

2 Preliminciries 

2.1 Basic concepts and notation 

Modal logic is an extension of propositional logic. A modal formula is a propositional formula 
using variables, the usual logical symbols A, V, ^, and a unary operator <0. (A dual operator 
□ is often considered as well, this can be regarded as abbreviation for ^0^.) A model for 
a modal formula is a set of connected "worlds" with individual propositional assignments. 
To be precise, a frame is a directed graph G — (W, R), where the vertices in W are called 
'Svorlds," and an edge (u, v) G R is interpreted as is "considered possible" from u. A 
model M = (G, X, tt) consists of a frame G = {W,R), a set X of propositional variables 
and a function n assigning each variable x £ X a. subset of W, the set of worlds in which x 
is true. We say the model M is based on the frame {W, i?). If is a class of frames, then 
a model is an .F-model if it is based on a frame in J^. With |M| we denote the number of 
worlds in the model M. 

For a world w Cz W, we define when a formula (f> is satisfied at w in M (written M, w \= 4>.) 
If (/) is a variable x, then M, w \= (j) ii and only \i w & 7r(a;). As usual, M, ui |= (^i A (/)2 if and 
only if M, -u; \= (pi and MjW \= (j>2, and M,w \= -'cp iS M,w ^ (p. For the modal operator, 
M,iu \= (}(p if and only if there is a world w' G W such that {w, w') G R and M, w' \= (p. 



logic name 


graph property 


formula definition 


K 


All graphs 


K(<^taut) 


T 


reflexive 


K((prefl) 


B 


symmetric 


K(<^aymm) 


K4 


transitive graphs 


K(<^trans) 


S4 


transitive and reflexive K(<^trans A <^rofi) 


S5 


equivalence relations 


K(<^trans A l^refl A <Psymm) 



Table 1. Common modal logics 



We now describe a way to define classes of frames by propositional formulas. The frame 
language is the first-order language containing (in addition to the propositional operators 
A, V, and -) the binary relation R. The relation R is interpreted as the edge relation in a 
graph. Semantics are defined in the obvious way, for example, a graph satisfies the formula 
<^trans '■= Vx, J/, z(xRy) A (yRz) =4> (xRz) if and only if it is transitive. In order to separate 
modal formulas from first-order formulas, we use to denote the latter, i.e., is a first-order 
formula, while ^ is a modal formula. 

A modal logic usually is defined as the set of the formulas provable in it. Since a formula 
is satisfiable iff its negation is not provable, we can define a logic by the set of formulas 
satisfiable in it. For a first-order formula (p over the frame language, we define the logic K((^) 
as the logic in which a modal formula (j) is satisfiable if and only if there is a model M and 
a world w G M such that the frame which M is based on satisfies the first-order formula 
If (we simply write M |= for this), and M,'w \= (p. Such a logic is called elementary. In 
the case that is a universal formula (i.e., every variable in (p is universally quantified at 
the beginning of the formula), we call these logics universal elementary. In this way, many 
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of the classic examples of modal logics can be expressed: In addition to the formula <ptrans 
defined above, let i^refl := yw{wR'w), and let <^symm := ^x,y{xRy) {yRx). Finally, let 

<^taut be some tautology over the frame language, for example let <^taut := Vx(x-Rx) 
(xRx) . Table 1 introduces some common modal logics and how they can be expressed in our 
framework. For a formula ip over the frame language, we consider the following problem; 

Problem: K((p)-SAT 

Input: A modal formula (f) 

Question: Is cp satisfiable in a model based on a frame satisfying 0? 

As an example, the problem K((^trans)^SAT is the problem to decide if a given modal 
formula can be satisfied in a transitive frame, and therefore is the same as the satisfiability 
problem for the logic K4. It is important to note that in the problem K(yi)-SAT, regard the 
formula (f is fixed. It is also interesting to study the uniform version of the problem, where 
we are given a first-order formula if over the frame language and a modal formula tp, and the 
goal is to determine whether there exists a graph satisfying both. This problem obviously 
is PSPACE-hard (this easily follows from Ladncr's Theorem 2.4, in fact, the problem is 
undecidable) . In this paper, we study the complexity behavior of fixed modal logics. 

When interested in complexity results for modal logic, the property of having "small 
models" is often crucial, as these lead to a satisfiability problem in NP, as long as the class 
of frames considered is reasonably well-behaved. 

Definition 2.1. A modal logic KL has the polynomial-size model property, if there is a 
polynomial p, such that for every KL-satisfiable formula (p, there is a KL-model M and a 
world w e M such that M,w\= cp, and \M\ < p{\(p\). 

The following standard observation is the basis of our NP-containment proofs: 

Proposition 2.2. Let (p be a first-order forrn,ula over the frame language, such that K[ip) 

has the polynomial- size model property. Then K((^)-SAT € NP. 

Proof. This easily follows from the literature, since for a given graph and a fixed first-order 
sentence (p, it can be checked in polynomial time if the graph satisfies (p. Also, it can be 
verified in polynomial time if a model satisfies a modal formula. Hence, the obvious guess- 
and- verify approach works for NP-containment. □ 

Since modal logic is an extension of propositional logic, the satisfiability problem for every 
non-trivial modal logic is NP-hard. Therefore, proving the polynomial-size model property 
yields an optimal upper complexity bound for the satisfiability problem for modal logics. 

2.2 Ladner's Theorem £ind Applications 

In the seminal paper [Lad77], Ladner showed PSPACE-containment and PSPACE- hardness 

for a variety of modal logics. In particular, he proved that the satisfiability problem for any 
logic between K and S4 is PSPACE-hard. In order to state Ladner's result, we introduce 
the concept of extensions of a logic, and how it relates to modal logics defined by first-order 
formulas. 

For a modal logic KL, an extension of KL is a modal logic KL' such that every formula 
which is valid (a tautology) in KL is also valid in KL', or equivalently such that every formula 

that is KL'-satisfiable is also KL-satisfiable. As an example, every logic that we consider is an 
extension of K, and S4 is an extension of K4. In the case of elementary logics, this is related 
to an implication of the corresponding first-order- formulas. In the following, when we say 
that a formula (f over the frame language implies a formula ip over the frame language, then 
we mean that every graph which is a model of ip also satisfies tp. 
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Proposition 2.3. Let Lp and ip be first-order formulas over the frame language, and let 
K((p) and K(i/;) be the corresponding elementary modal logics. If (p implies tp, then K{(p) is 
an extension of K{^p). 

Proof. Let </> be a modal formula which is valid in K{tp). Then -i</) is not K(?/')-satisfiable. 
Now assume that -^cp is K(yi)-satisfiable. Then there exists a model M and a world w G M 
such that M, w \= ^(f) and M is a K((^)-modcl, i.e., M |= (f. Since (p implies ip, we know that 
M \= tp, and therefore M is a K(^)-model. Therefore, -'(p is K('!/;)-satisfiable, a contradiction. 
Therefore we know that -^^ is not K((^)-satisfiable, and hence (p is valid in K{ip). Therefore, 
it follows that K(yi) is an extension of K(V»). □ 

Note that the converse of Proposition 2.3 does not hold. For example, consider the 

formulas ipi = 3x(xRx), and (f2 = \/x{xRxP) V (xRx). Then ip2 is a tautology and ipi is not, 
in particular, we know that ip2 does not imply ipi. But the logics K{ipi) and K{ip2) are easily 
seen to be identical (and both identical to K). In particular, they are extensions of each 
other. 

Ladner's main result can be stated as follows: 
Theorem 2.4 ([Lad77]). 

1. The satisfiability problems for the logics K, K4, and S4 are PSPACE-complete, and S5- 
SAT is NP-complete. 

2. Let KL be a modal logic such that S4 is an extension of KL. Then KL-SAT is PSPACE- 
hard. 

Ladner's proof for Theorem 2.4 shows some additional results, which we will give as a 
series of corollaries. 

The construction from Ladner's proof can be modified to prove the following result as 
well: 

Corollary 2.5. Let Lp be a formula over the fram,e language which is satisfied in every 
symmetric tree or in every reflexive and symmetric tree. Then K((p)-SAT is PSPACE-Ziarrf. 

Even though the proof is just a minor variation of Ladner's proof, we give the entire 
construction for completeness. We mention where the adjustments for the symmetric case 
are. 

Proof. The result follows from a slight modification of Ladner's proof for the hardness result 
in Theorem 2.4. We follow the presentation of [BdRVOl], where Ladner's theorem can be 
found as Theorem 6.50. 

The proof shows a reduction from the evaluation problem for quantified Boolean formulas, 

QBF. The main strategy is to create from a quantified formula x ^ modal formula (p such 
that in any satisfying model for 0, a complete "quantifier tree" for the quantifier block of x 
can be found, i.e., a tree where for each existentially quantified variable, one value is chosen, 
and for universally quantified variables, both alternatives true and false are evaluated. 

Let X = QiVi ■ ■ ■ QmPm(^{Pii ■ ■ ■ jPm) be a quantified Boolean formula, where Qi G {V, 3} , 
and ^ is a propositional formula. Prom this we construct a modal formula (p, in which 
variables pi, . ■ . ,Pm and qi, . . . ,qm appear. The pi correspond directly to the variables of 
the propositional formula, and the mark the level of the node in the modal model: As 
mentioned, a model M for the formula (p is essentially a quantifier tree, and hence each node 
has a unique level in M . The construction will ensure that (up to the depth of the model 
that we care about) qi is true in a state if and only if the state is on level i in the model. 
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The variables pi express the vahies of the variables in the quantifier tree, where the value 
of Pi is only regarded as "defined" from level i onwards (obviously, these variables also have 
values in other levels, but the values in these levels are not of interest to us). 

For constructing the formula which forces the quantifier tree, we first introduce two 
macros. The macro Bi requires the model to "split" at level i : 

Bi := Qi 0(gi+i Api+i) A 0(gi+i /\Pi+i)- 

The effect of the formula Bi is that if it is required to be true in level i, then each node 
in level i must have two different successors in the next level, setting the variable Pi+i to 
true in one of them, and to false in the other. Therefore we can use this macro to force the 
"branching" of the quantifier tree in the levels corresponding to universal variables: if Pi+i is 
a universally quantified variable, then the macro Bi ensures that both possible truth values 
for pj+i are evaluated. 

When forcing the quantifier tree, we also need to ensure that truth values for the variables 
Pi are properly propagated to "lower levels" in the tree. For this, we use the following 
macro (and this is the only point in which our construction differs from the proof given 
in [BdRVOl]): 

Si ■■= {{pi □(('7i+i V • • • V (7m) ^ pi)) A{]Ti^ □(('7i+i V • • • V g™) ^ Pi)))- 

This formula forces the truth value of pi to be propagated "down" the tree from those 
levels on where we actually regard the value of pi as set, i.e., from the level i on. Note that a 

node V can only have a successor in which (g^+i V • • • V qm) holds if its own level is at least i, 
and hence we restrict the values of Pi in exactly those parts of the tree where it is regarded 
as defined. 

We now give the construction of the formula (p, which as mentioned is identical to the 
one used in Ladner's proof, with the exception that our macro Si is different. The formula if 
is the conjunction of the following formulas (here, D'^tp is an abbreviation for a □□ . O t/j, 

m 

and is a shorthand for ip A D^ip A A • • • A D'^ip): 

{i) qo 

(m) □(™)(g,^Ai^.g7) (0<i<m) 

(iiia) □(") {q, ~* Og»+i) (0 < i < m) 

iiiib) A{i I Q.=v} ^'Bi 

{iv) (0,<i<m) 

{v) □™(9„ ^ e) 

The construction works as follows: With formula (i), we give the start of the model and 
define the world w in which ip is satisfied to have the level 0. Formula (ii) requires each node 
which is reachable in at most m steps from w to have a well-defined level (or none). Formulas 
(iiia) and (iiib) require each level i to be followed by level i + I, and in the case that the 
ith. quantifier is V, formula (iiib) requires the corresponding branching of the quantifier tree. 
Formula (iv) then forces the truth values of the pi to be "sent down" the tree, as described 
earlier. Formula (v) finally requires that the propositional formula d is true for all possible 
truth assignments to pi, . . . ,pm generated by the quantifier tree. □ 

Ladner's construction for the PSPACE upper bound for the logic K also reveals the 
following. The main idea behind this corollary is that any model for some modal formula 
can be transformed into a strict tree by "unrolling." A much more general version of this 
result will be proven later as Theorem 4.33. 
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Corollary 2.6. A modal formula is K-satisfiable if and only if it can be satisfied in a strict 
tree. 

Corollary 2.6 shows that wc only need to apply our formulas to trees as long as our 
first order formula does not "say anything" about trees, the generated logic is the same as 
K, although these logics do not necessarily have the same set of models. 

Corollary 2.7. Let (p he a first-order formula over the frame language such that (p is sat- 
isfied in every strict tree. Then the satisfiability problem for K((^) is PSPACE-complete. 

Proof. This follows immediately from Corollary 2.6 and Theorem 2.4, since every modal 
formula is K-satisfiable if and only it is K(yi)-satisfiable. □ 

For our complete classification in Theorem 4.17, we need a hardness result which is a 
slight variation of Ladner's hardness result for all logics between K and S4. However, the 
proof is merely a closer inspection of Ladncr's construction. 

In addition to the already mentioned graph properties, we define a generalization of 
transitivity. For a natural number k, we say that a graph G is fc-transitive, if every pair 
of vertices (u, v) in G such that there is a fc-stcp path from u to v in G is connected with 
an edge. It is easy to see that a graph is transitive if and only if it is 2-transitive, and a 
transitive graph is also fc-transitive for every fc e N. For a set 5 C N, we say that a graph is 
S'-transitive if it is fc-transitive for every k G S. 

Theorem 2.8. Let ■ip be a first- order formula over the frame language such that one of the 
following cases applies: 

— ijj is satisfied in every strict tree, 

— ^ is satisfied in every reflexive tree, 

— there is a set 5* C N such that ij) is satisfied in every S -transitive tree, 

— ij} is satisfied in every symmetric tree, 

— ^ is satisfied in every tree which is both reflexive and symmetric, 

— there is a set S C N such that ip is satisfied in every tree which is both reflexive and 
S-transitive. 

Then K(V3)-SAT is PSPACE-hard. 

Note that for the cases not including symmetry, the result "almost" follows directly from 
Ladner's Theorem 2.4. It does not follow directly, since we only require that our first-order 
formulas arc satisfied in S'-transitivc trees, but nothing about arbitrary S'-transitive graphs. 
Nevertheless, the result for this case follows directly from Ladner's proof. 

Proof. First c;onsider the cases in which symmetry docs not occur. Now the result follows 
directly from Ladner's proof: Ladner proves PSPACE-hardness with a reduction from QBF. 
From a quantified Boolean formula x, be constructs a modal formula </> such that the following 
holds: 

1. If X is true, then there is a modal model M and a world w G M such that M is a strict 
tree, and M, w \= (f>. Moreover, adding any number of reflexive or transitive edges in M 
preserves the fact that M, w \= cf). 

2. If X is false, then is not K-satisfiable. 
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It is immediate that this reduction also proves the desired hardness result for K^ip) : 
First assume that x is true. Then, by the above, the model M, w satisfies 0, and is a tree. If 
we close this model under the reflexive and/or S-transitive closures, then by the above this 
still is a model for <}>. Since tj) is satisfied in every reflexive and/or ^-transitive tree, this is 
a K(-0)-model for i/i, and hence (f) is K(?/;)-satisfiable. On the other hand, if x is false, then (j) 
is not K-satisfiable, and therefore not K(^/;)-satisfiable. 

Now the cases involving symmetry follow from Corollary 2.5. □ 

As this section indicated, trees are an important subclass of modal models. And in fact, 
a good intuition to read this paper is to always think of the graphs we deal with as "near- 
trees," i.e., trees with additional edges. 

3 About Modal Models 

NP-results in this paper are shown with the explicit construction of small models for a 
given formula. We therefore introduce some notation on graphs. For a graph G, the set of 
vertices of G is denoted with vertices (G) , and edges (G) is the set of its edges. As usual, a 
homomorphism from a graph Gi to a graph G2 is a function preserving the edge relation. 
A strict tree is a tree in the usual sense, i.e., a directed, acyclic, connected graph which has 
a root w from which all other vertices can be reached. We now define notation to desc;ribe 
paths in graphs. Note that we often identify modal models and their frames, when the 
propositional assignments are clear from the context or not important for our arguments. 

Definition 3.1. Let G be a graph, w,v £ G vertices, and « G N. We write G \= w — ^ v 

if in G, there is a path of length i from w to v. Additionally, G \= w — ^ w for 
all w G G. We also say that w is a i-step predecessor of v, and v is a i-step suc- 
cessor of w in G, if G \= w — ^ v. The maximal depth of w G G is defined as 
maxdepth*^ := max|i | Bw' € G , G \= w' ——^ . Similarly, the maximal height of 

w G G is maxheight*^ {w) := max |i | 3w' G G,G \= w — ^ 

Note that the maximal depth and maximal height of nodes can be (countably) infinite, 

even in flnite graphs. The next deflnition is a restriction on graphs which is very natural 
for modal logics: for deciding whether M, w \= 4> holds for some modal M, a world w G M, 
and a modal formula </>, it is obvious that only the worlds which are reachable from w are 
important. 

Definition 3.2. Let G be a graph, and let w G G. The graph G^ is obtained from G by 
restricting G to the worlds which can be reached from w. 

3.1 Invariants 

Proving the polynomial-size model property for some logic is usually done starting with an 
arbitrary model for a given modal formula and building a smaller model out of it, which 
still satisfles the modal formula. However, we also need to ensure that the new model still 
satisfles the conditions of the logic under consideration. Therefore, we need results that 
allow us to perform modiflcations on our models and leave the modal and the flrst-order 
properties invariant. The flrst result in this way concerns the flrst-order aspect of the frames 
for universal formulas: 
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Theorem 3.3. Let G and G' he graphs, and let n he a natural numher. The following 

conditions are equivalent: 

1. Every universal first-order formula (with at most n variahles) satisfied hy G' is also 
satisfied by G, 

2. Every existential first-order formula (with at most n variahles) satisfied hy G is also 
satisfied hy G', 

3. For each finite V C G (such that \ V\ < n), there exists a functions f: V ^ G' such that 
for u,v gV, it holds that uRv iff f{u)R'f{v). 

Proof. 1 2 Let 3x1 . . . 3a;„<^(a;i, . . . ,a;„) be an existential first-order formula over the 
frame language which holds in G, and assTime that it does not hold in G' . In this case, the 
negation of the formula holds in G' , i.e., G' \= 3xi . . . 3Xn<^{xi, . . . , a;„). This is equiva- 
lent to G' \= Mxi . . .yxn<p{xi,. . . ,Xn), which is a universal first-order formula over the 
frame language. Hence by the prerequisites, we know that G \= Mxi . . . Vx„<^(a;i, . . . , a;„), 
which is a contradiction. 

2 — > 1 Analogously to the above. 

2^3 We construct a function /: V ^ G' with the desired properties. Let \V\ = n, and let 
V = {xi, . . . , Xn}- We construct an existential first-order formula 

■tp = 3xi, 3xn f\ XiRxj A /\ XiRxj. 

Obviously, ip has n variables, and G obviously is a model for tp, it follows that G" |= ip. 
Therefore, there such that {xi, xj) G R if and only if (x^, x^) G R'. Define 

/(:/■,) := .t'. This function obviously meets the criteria: Let {xi,Xj) G R. Then XiRxj is 
a clause in -0. Therefore for the values x[ and x'j chosen by the existential quantifiers, 
{x'^,Xj) G R must hold. Since f{xi) = x'^ and f{xj) = x'j, the claim follows. For the 
condition R{xi, xj), the proof is the same. 
3^2 Let such a function / exist for every V C G with \ V\ < n. Let tp := 3xi, . . . , 3xn(p be 
a first-order existential formula, let n be the number of variables in tp, and let G \= tp. 
We show that G' \= -tp. Since G \= tp, there are xi, . . . , x„ G G such that if{xi, . . . , Xn) 
holds in G. This implies that ip{f{xi), . . . , f{xn)) holds in G' . Therefore, G' \= tp. 

□ 

Note that while the function / required to exist in the conditions of the above theo- 
rem shares some properties with an isomorphism, it is not required to be injective. The 
following is an important special case, which immediately follows from this observation and 
Theorem 3.3: 

Proposition 3.4. Let G he a graph, (p a universal first-order formula over the frame lan- 
guage such that G \= (fi. Then for every subgraph G' of G, it holds that G' \= (p. 

For a modal model, a restriction of the model is a restriction of the graph, where the 
propositional assignment for the remaining worlds is unchanged. We now consider restric- 
tions which are "compatible" with the modal properties of the formulas in question. The 
following lemma describes a standard way to reduce the number "relevant" of successors to 
worlds in models. This is an application of the more general idea of bounded morphisms, 
which we will encounter in Section 4.6. For a modal formula cp, sf ((/)) denotes the set of its 
subformulas. With md (0) , we denote the modal depth of a formula (p), i.e., the max:imal 
nesting degree of the modal operator <) in 0. 
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Lemma 3.5. Lei (j) be a modal formula, and let M,w \= (j). Let M' he a restriction of M 
such that the following holds: 

1. we M', 

2. for all u G M', and all ip £ sf (0) such that M,u\= ()tp, there is some v G M' such that 
{u, v) is an edge in M, and M,v \= ip. 

Then M',w \= (j). 

Lemma 3.5 immediately follows from the following Lemma. The version stated in 

Lemma 3.5 is the one we almost exclusively use, hence we stated this simpler version ex- 
plicitly. We now prove a slightly more general result, which also takes into account that for 
a modal formula, worlds which are not reachable on a path with at most the length of the 
modal depth of the formula, are irrelevant. 

Lemma 3.6. Let (j) be a m.odal formula, and let M,w \= ^. Let M' be a restriction of M 
such that the following holds: 

1. we M', 

2. for all u € M', and all tp e si (</>) , such that M,u \= ()tp and there exists an i gN such 

that M \= w — ^ u and 1 + i + md {ip) < md {(f)) , there is some v G M' such that {u, v) 
is an edge in M, and M,v \= ip. 

Then M',w \= (j). 

Proof. We show the following claim: Let x € sf (^) , i e N, and u G M' such that M \= 

w — ^ u, and i + md (x) < md {(j)) , then M, m |= x if and only if M' , u \= x- For x = 4'i 
u = w, and i = 0, this implies the Lemma, since w is an element of M' by definition. 

We show the claim by induction on x- If X is a variable, then this holds trivially, since 
M' is a restriction of M and therefore, propositional assignments are not changed. The 
induction step for propositional operators is trivial. Therefore, assume that x = 0^ for 
some tp G sf {(p) , such that the claim holds for tjj. Now let u, i meet the prerequisites of the 
claim, i.e., let i + md (x) < md {(p) , and let M |= w — ^ u. 

First assume that M,u \= x- Since x = Oi', it follows that md (x) = md {tp) + 1, and 
hence z + 1 + md {ip) < md {^). Since M,u\= ()tp, the prerequisites of the Lemma therefore 
imply that there is a world v G M' such that (u, v) is an edge in M, and M,v |= V- Since 
M \= w u, it follows that M \= w v. By the induction hypothesis, we know that 
M' , V \= ip. Since M' is a restriction of M, (u, v) is an edge in M' as well, and therefore we 
conclude that M',u \= Oip, i.e., M',u \= x- 

For the other direction, assume that M',u \= %. Therefore, there is a node v G M' such 

that M', V \= Ip, and (u, v) is an edge in M'. Since M \= w — ^ u, we know that M \= w v 
holds as well, and since md (ip) = md (x) — 1, from the induction hypothesis we conclude 
that M, V \= Ip. Since (u, v) is an edge in M as well, it therefore follows that M, u |= 0'^, 
i.e., M,u\= x^ concluding the proof. 

□ 

The following easy proposition shows how Lemma 3.6 can be applied: 

Proposition 3.7. Let KL be a universal elementary logic, let (p be a modal formula, and let 
M,w \= (p, where M is a KL-model. Then there is a KL-model M' which is a restriction of 
M, which is rooted at w, and where every world can be reached from w in at most md {(p) 
steps, and M',w \= (p. 
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Proof. The model M' is obtained by simply removing all worlds from M which cannot be 
reached from w in at most md (0) steps. Due to Proposition 3.4, M' is still a KL-model. We 
now show that M' , w \= (p holds, by proving that M' satisfies the conditions of Lemma 3.6. 
By definition, since w can be reached from w in steps, wc know that w G M' . Hence 

let u e M', and let V G sf (0) , and let M,u \= such that M \= w u for some 
i such that 1 + i + md (i/') < md (0). Since M,u \= ()'tp, we know that there is a world 

z+l 

V G M such that M,v \= ijj, and {u, v) is an edge in M. It follows that M \= w — > u. Since 
l + md (tjj) < md {(f>) , and md (tp) < md {(p) , we know that i + 1 < md {(p) , and hence we 
know that v is an element of M' . 

Therefore, M' satisfies the conditions of Lemma 3.6, and therefore the lemma implies 
that M', w \= (p, as claimed. □ 



3.2 Restrictions 

As mentioned, our NP-containment results are obtained by proving the polysize model prop- 
erty and applying Proposition 2.2. The polynomial models are obtained by restricting arbi- 
trary models to polynomial size. We will now show some restrictions which we can make in 
any model, showing that we can assume certain parts of the model to be only polynomial 
in size. 

Lemma 3.8. Let c € N. Then for any modal formula <p o.nd any M,w \= ^, there is a 
submodel M' of M such that M',w \= (p and the following holds: 

I {v e M' I maxdepth^' {v) < c} | < (c + 1) • l^l'^ . 

Proof. For each world u in M, let F„ := {■^ e sf {(p) \ M,u\= ()ip}. For each u, let W„ be a 

subset of the 1-step successors of w in M such that for every -0 € F„, there is a world v € Wu 
such that {u,v) is an edge in M, and M,v \= i^, and |W„| < |F„|. Now define Mq := {w} , 
and for each i e N, let Mj+i := IJtjgM Finally, define M' to be the restriction of M to 

To show that M',w \= (p, we prove that M' satisfies the conditions of Lemma 3.5. 
Obviously, M' is a restriction of M and w G Mq C M. Therefore, let u be a world from M' , 
and let tp he a, subformula of (p such that M,u \= ()ip. Since u € M' , there is some i such 
that u G Mi. Since M,u \= ()ip, we know that 'ip G Fm and hence there is a world v € 
such that M, v \= ip, and (u, v) is an edge in M. It follows that v € Wu C Mj+i C M', and 
hence M' satisfies the conditions of Lemma 3.5 as claimed. 

Now let 

A := {t; e M' I maxdepth^' {v) < c}. 

It remains to show the cardinality bound for A. It is obvious that A C U^^^Mi, since for 
every i, every vertex in Afj+i has a predecessor in Mj, and hence inductively, every vertex 
in Mi has an i-step predecessor in M'. 

Obviously, \Mo\ = 1, and |Mi+i| < \Mi\ ■ {sf {(p)\. Therefore, \Mi\ < \sf {(p)f for alH e N. 
Now, due to the above, \A\ < |U?=o-^il < (c+ 1) • |sf Since |sf (^)| < \(p\ , the claim 
follows. □ 

By construction, the model M' given in the proof of the above lemma is countable. Hence 
we obtain the following corollary: 

Corollary 3.9. Let KL be a universal elementary logic. Then every KL-satisfiable formula 
(p is satisfiable in a countable KL-model. Moreover, every KL-model satisfying (p at a node w 
contains a countable KL-submodel satisfying (p at the node w. 
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The following lemma shows that it is sufRcient to restrict the mimber of those vertices in 
the model which have a minimal height in the graph. In combination with Lemma 3.8, this 
shows that we only need to be concerned about vertices which have both a certain number 
of predecessors, and a certain number of successors. We already saw in Proposition 3.7 that 
we are only interested in rooted graphs. In such graphs. Lemmas 3.8 and 3.10 can be seen as 
limiting the number of vertices near the "top" or the "bottom" of the model. This is useful, 
because in graphs satisfying some universal formula, often special cases can occur in these 
regions of the graph. These lemmas show that we do not need to look too closely at these 
exceptions. 

Lemma 3.10. Let c G N be a constant. Then for any modal formula <p and any M, w \= <p, 
there is a submodel M' of M such that M',w \= (f), and for which the following holds: 



Proof. Let A := |u e M | maxheight (v) > c| , i.e., the set of nodes in M which have a 

c-step successor. We now define a sequence of submodels of M : Let Mq := 0, Mi := Au{t/;} , 
and for i > 1, let Mj+i be defined as follows: 

- Mi C Mi+i, 

— For every u £ Mi\ Mj_i, and each ?/> e sf (</>) such that M,u \= Otjj, add one world v 
from M to Mj+i such that (u, v) is an edge in M and M, v \= ip. 

Now let M' be the restriction of M to the worlds in M^+i. We show that M',w \= 4>, 
by showing that it satisfies the conditions of Lemma 3.5. By definition, it; e Mi C M' . 
Hence let u E M' , ip E sf {(f)) , and let M.u \= Since u E M' , there exists a minimal i 
such that u E Mi. First assume that i = c + 1. By construction, for every relevant j, every 
node in M^+i \ Mj has a 1-step predecessor in Mj \ Mj_i, and hence, inductively, the node 
u E Mc+i \ Mc is a c — 1-stcp successor of a node x in M2 \ Mi. Since AI, u \= ()ip, we know 
that u has a successor in M. This implies that x has a c-step successor in M, and hence 
X €: A, which is a contradiction, since x G M2 \ Mi, and A C Mi. 

Therefore, we know that i < c. By construction, there is a world v in Mj+i C M' such 
that (w, v) is an edge in M, and M.v \= tp. Therefore, the model M' satisfies the conditions 
of Lemma 3.5, and therefore we conclude that M', w \= cj). 



By definition, it holds that |Mi| < \A\ + 1, and for i > 1, |Mi+i| < \Mi\ (1 + \sf{(j))\). 
Since |M'| = |Mc+i| , this implies that |M'| < (m + 1) • (1 + |sf (</>)!)'= < (|^| + 1) • (1 + |(/)|)^ 



The main purpose of Lemmas 3.8 and 3.10 is the following: If for a modal logic KL, 
there is a constant c, such that every KL-satisfiable formula has a model in which we can 
restrict the number of nodes which have both a c-step predecessor and a c-step successor, 
then Lemmas 3.8 and 3.10 can be used to show the polynomial model property for KL. This 
idea plays a crucial role in the proof of our main NP-containment result. Theorem 4.13, and 
is formalized in the following corollary: 

Corollciry 3.11. Let KL be a universal elementary modal logic such that there exists a 
constant c E N such that there is a polynomial p such that for all KL-satisfiable formulas (j), 
there is a KL-model M and a world w E M such that M, w \= (j), and 




where f{n) = (n + 1) • (1 + \(t)\y. 



as claimed. 



□ 
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|u S M I maxdepth^ (w) > c and maxheight^ (w) > c| < 

Then KL has the polynomial-size model property, and KL-SAT G NP. 

Note that the function p is only required to be polynomial in its argument \(f>\ , and not 
in the value c, which is a constant depending only on the logic, and not on the formula. 

Proof. Let </> be a KL-satisfiable formula, and let M be a KL-model and w G M meeting 
the prerequisites of the corollary. By Lemma 3.8, there is a submodel M' of M such that 
M',w \= 4>, and 



|i; G M' I maxdepth^' {v) < c| | < (c + 1) 



Therefore, since the conditions required in the prerequisites of the corollary are invariant 

under further restrictions of the model, assume without loss of generality that M already 
satisfies this condition. Now let M = T U C U B, where 

T := |w e M I maxdepth'*'^ (?;) < c| , 

C := |u e M I maxdepth^ {v) > c and maxheight^ {v) > c| , 
B := !«; e M I maxheight^ (c) < c| . 

Note that T and B are not necessarily disjoint (T contains the nodes with only small 

depth at the "top" of the model, C represents the "center" of the model, and B is the 
"bottom."). By the prerequisites of the corollary, we can assume that \C\ < p(|0|) , and by 

the above we know that |r| < (c + 1) • l^l"". Now let A := e M | maxheight^ (v) > c|. 

It follows that ^ C T U C, and hence \ A\ < \T\ + \C\ < {c + 1) ■ \cp\'' + p (|^|) . 

By Lemma 3.10, there is a submodel M' of M such that M', w \= (/> and \M'\ < {\A\ + 1) ■ 
(1 + 101)^ and hence by the above we have that |M'| < ((c+ 1) • |(/)|'' + 1) • (1 + |0|)^ 
(note that the cardinality of the size A defined with respect to the submodel M' is bounded 
by the cardinality of the original set A). Since p is a polynomial and c is a constant only 
depending on the logic KL, this is a polynomial size bound in |0| , and therefore we have 
proven the polynomial-size model property. By Proposition 3.4, M' is a KL-model. The 
complexity result now follows from Proposition 2.2. □ 



4 Universal Horn Formulas 



We now consider a syntactically restricted case of universal first order formulas, namely 
Horn formulas. Many well-known logics can be expressed in this way. 



4.1 Definitions 

Usually, a Horn clause is defined as a disjunction of literals of which at most one is positive. If 

a positive literal occurs, then the clause can be written as an implication, since aFfV- • -VS^Vy 
is equivalent to XiA - • -AXn =^ y. If no positive literal occurs, then the clause (aTfV- • -Va^^^) 
can be written as a;i A • • • A Xn =J> false. Since in the context of the frame language, an 
atomic proposition is of the form (xRy), the following is the natural version of Horn clauses 
for our purposes: 
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Definition 4.1. A universal Horn clause is a formula of the form {xiRx2) A • • • A 
{xk-iRxk) {xiRxj), or of the form {X1RX2) A ••• A {xk-iRxk) false, where 

all (not necessarily distinct) variables are implicitly universally quantified. 

A universal Horn formula is a conjunction of universal Horn clauses. With universal Horn 
formulas, many of the usually considered graph properties can be expressed, like transitivity, 
symmetry, cuclidicity, etc. In the following definition, we show how universal Horn clauses 

can be represented as graphs. 

Definition 4.2. Let be a universal Horn clause. 

— The prerequisite graph of (p, denoted with prereq(i,5) . consists of the variables appearing 
on the left-hand side of the implication (f, where {xi,X2) is an edge if the clause {X1RX2) 
appears. 

— If is a universal Horn clause where the right-hand side of the implication in (p is 
R{x,y), then the conclusion edge of ip, denoted with conc(<^), is the edge {x,y). If the 
right-hand side of the implication is false, then conc(<^) is the empty set. 

4.2 Universal Horn Clauses and Homomorphisms 

The definition of the prerequisite graph and the conclusion edge of a universal horn formula 
establishes a onc-to-onc correspondence between universal Horn clauses and their represen- 
tation as graphs. These definitions allow us to relate truth of a Horn clause to homomorphic 
images of the involved graphs: 

Proposition 4.3. 1. Let if be a universal Horn clause with cone (1^) = {x,y). A graph 
G satisfies (p if and only the following holds: For every homomorphism a : prereq {(p) U 
{x,y} — !■ G, {a{x),a(y)) is an edge in G. 
2. Let ip be a universal Horn clause such that cone {(p) = 0. Then a graph G satisfies tp is 
and only if there is no homomorphism a : prereq (0) — > G. 

Proof. 1. Let prereq (tp) = {X1RX2) A ••• A {xn-iRxn), where all variables are im- 
plicitly universally quantified. First assume that G \= (p>, and let a: prereq ((^) U 
{x,y} — !■ G be a homomorphism. Due to the definition of prereq ((^), 
there are edges {xi,X2), . ■ . ,{xn-i,Xn) in prereq ((p). Since a is a homomor- 
phism, this implies that {a{xi),a{x2)), ■ ■ ■ ,{o!{xn--i_),a{xn)) are edges in G. Hence 
the nodes a{xi), . . . ,a{xn),a{x),a{y) satisfy the formula R{a{xi),a{x2)) A ••• A 
R{a{xn-i),C({xn)). Therefore, the nodes {a{v) \ v G prereq {<p) U {x, y}} satisfy the pre- 
requisites of the clause (p>. Since G \= cp, this implies that {a{x),a{y)) is an edge in G. 
Now for the other direction, assume that G fulfills the homomorphism property, and let 
VARip = {xi, . . . , Xn}. Let ai, . . . ,a„ be nodes in G satisfying the prerequisite clause 
of (p, i.e., if (xi^jXi^) is a clause in prereq (<^) , then (ai^jUi^) is an edge in G. Then 
obviously the function a mapping the variable Xi to the node a^, is a homomorphism 
from prereq ((^) to G. By the prerequisites, we know that {a{x),a{y)) is an edge in G. 
Hence, G satisfies the formula 0. 
2. Analogous. 

□ 

There is a natural correspondence between implications of these formulas and graph 
homomorphisms. 
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Proposition 4.4. 1. Let ipi and (f2 be universal Horn clauses such that there exists a 
homomorphism a: prereq((^i) prereq((^2) , which maps the conclusion edge of (pi to 
the conclusion edge of (p2- Then f>\ implies 02- 
2. Let (fi and ip2 be universal Horn clauses such that cone (<^i) = cone ((^2) = 9, and let 
a: prcrcq((^i) prcrcq((^2) be a hom,om,orphism. Then ipi implies ip2. 

Proof. 1. Let cone(<^i) = {x,y), then by the prerequisites it follows that cone ((^2) = 
{a{x),a{y)). Now let G be a graph such that G \= (pi, and let (3: (prereq((^2) U 
{a{x),a{y)}) G be a homomorphism. By Proposition 4.3, it suffices to show 
that {f3{a{x)) , I3{a{y))) is an edge in G. Since a and /3 are homomorphisms, /3 o 
a: prereq(i^i) ^ G is a homomorphism as well. Since G \= ipi, Proposition 4.3 im- 
plies that {I3{a{x)), (}{a{y))) is an edge in G, as claimed. 
2. Let G be a graph such that G |= (pi. Due to Proposition 4.3, to show that G |= (p2-i it 
suffices that there is no homomorphism /3: prereq((p2) G. Hence assume that such a 
homomorphism exists. Then /? o a is a homomorphism from prereq (<^i) into G, which is 
a contradiction to Proposition 4.3, since G \= (pi. 

□ 

4.3 Importcint Special Ccises 

We now consider special cases of Horn clauses, which will be central for the logics having 
satisfiability problems in NP. The following definition captures the case where the variables 
in the conclusion edge have a common predecessor in the prerequisite graph, but there is not 
necessarily a direct path between them. Using results about graphs satisfying generalizations 
of formulas of this type, we will be able to show all of the NP-containment results that the 
proof of the later classification theorem. Theorem 4.17, depends on. 

Definition 4.5. Let (p^^^ be the formula 

{wRxi) A (a;ii?X2) A • • • A (xk-iRxk) A (wRyi) A {yiRy2) A • • • A {yi-iRyi) =4- {xkRyi), 

where all variables are universally quantified (and in the case that xq or yo appear in the 
formula, we replace them with w). 

In Figure 1, we present the graph representation of the formula 
^2^4 rpj^g graph property described by these formulas is easy to 
see: 

Proposition 4.6. Let G be a graph, and let k,l G N. Then G \= 
^k^i jy g^^^ Qj^iy if for any nodes w.Xk.yi G G, if G \= w — ^ Xk 
and G \= w — ^ yi, then {xk,yi) is an edge in G. 

This definition generalizes several well-known examples — in par- 
ticular, a graph is refiexive if and only if it satisfies 1^°^", symmetry 
is expressed with ip^^'^, and transitivity with (p"^^. Finally, a graph 
is Euclidean iff it satisfies (p^^^. Therefore, this notation allows us 
to capture many interesting graph properties, and it is not surpris- 
ing that generalizations of this idea are the main ingredients for 
our polynomial size model proofs. We start with looking at some 
properties and implications of formulas of the form (p'^^K 

Lemma 4.7. Let 1 < k,l G N, and let G be a graph such that G \= ip'^^K 




Fig. 1. Example 
clause w^^^ 
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1. (pl+k-l^l+k^ 

2. Ifl = k+1, then for anyi>k,G^ ip'^'+\ 

3. There is some k' >1 such that G \= for all i > k'. 

Proof 

l-\-k—l l-\-k 

1. Let w be some node in G, such that G \= w — > xi+k-i, and G \= w — > yi+k, and let 
the (not necessarily distinct) intermediate vertices be denoted with Xi,yi. Since (f'^^^ 

holds in G, this implies that there is an edge {yk,xi). By choice of nodes, G \= xi — !■ 
Xl-^-k-l■ Combining these, we obtain a path of length k from yk to Xl-^-k-l■ On the other 

hand, G \= yk — ^ yk+i- Since 0''^^ holds in G, it follows that there is an edge from 
xi+k-i to yi+kj proving that (^'+'=-1^'+'= holds in G. 

2. Clearly it suffices to show G \= ipk+i^k+2^ ^^le claim for arbitrary i follows inductively. 
Let w,Xj,yj be chosen such that w = xq = yo, and there are edges {xj,Xj+i) and 
{yj,yj^i). We need to show that there is an edge {xk+i,yk+2)- 

Since G \= (p'^^'^^^, it follows that {ykiXk+i) is an edge in G. Since there obviously is a 
path of length k—1 from j/i to yk, it follows that there is a path of length k from yi to 
Xk+i- Since there also is a path of length fc + 1 from yi to yk+2i it follows that there is 
an edge {xk+i,yk+2) in G, which concludes the proof. 

3. This follows immediately from the above: from points 1 and 2, it follows that the claim 
holds for k' — l + k-l. 

□ 



The formula t^*^"*' is supposed to capture the case where 
the variables in the conclusion edge of a universal Horn 
clause have a common predecessor. But not all of these cases 
axe covered with this formula. The above Figure 1 is a graph- 
ical representation of what the implication (^^^'* does. But 
what if this is only a subgraph of the prerequisite graph? In a 
more general case, the node w and the nodes x^, yi will have 
more predecessors and successors. Figure 2 gives an example 
of a more general formula. We will now see that this formula 
can be "simplified." This simplification is not an equivalent 
transformation of the formula, but we construct a new for- 
mula which is implied by the original one. The one-sided 
implication suffices to show many of the results we need. 
The simpler formula is presented in Figure 3. 

It is easy to see that every graph which satisfies the for- 
mula displayed in Figure 2 also satisfies the formula from 
Figure 3. This follows directly from Proposition 4.4, since the 
prerequisite graph from Figure 2 can obviously be mapped 
homomorphically to the prerequisite graph from Figure 3 
(the homomorphism a is defined as a{ti) := X2,0i{s) := 
M2,q:(u3) := w, and maps the other nodes to the ones with 
the same labels). Hence, if we can show NP-containmeiit for all il elementary modal 

logics extending the one defined by the later formula, this puts the logic defined by the 
original formula into NP as well. 




Fig. 2. More general formula 
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(2/1) 



Any universal Horn clause which can be mapped onto a tree can be 
embedded in a graph with certain properties, namely the properties of 
the formula we now define. Due to Corollary 2.7, it is natural that tree- 
like homomorphic images of our universal Horn formulas are of interest to 
us. These formulas capture the generalizations of ip^^'- mentioned above, 
where we demand that the nodes w,Xk,yi have a sufficient number of 
predecessors or successors. We again use the representation of Horn clauses 
as graphs. 

Definition 4.8. For k,l,p,q,r G N, the formula 'f>^p^x>q,y>r defined 
as the universal Horn clause displayed in Figure 4- 

It should be noted that the notation 'P^p^x>q,y>r suggests that w, y, x 
can be compared to natural numbers, but whaFis meant in that notation 
is simply that the number of predecessors (successors, resp.) of w,Xk,yi 
can be compared to p,q, and r, respectively. Hence, if we use "natural 
names" for the vertices, i.e. we have vertices w = xo,xi, . . . , and w = 
yo,yi,..., then this ensures that the vertices up to Xq, yr, and Wp exist. 
When proving that this formula holds in a graph, we will usually rely 
on the notation provided in Figure 4, and assume that there are nodes 
Wp, . . . ,Wo = w = Xq = yo,Xi, . . . ,Xq,Xi, . . . ,yr- with edges as seen in 
Figure 4, i.e., most of the time we do not mention the homomorphism explicitly. 

The formula 'p'^p ^e seen to be only a slight gener- 

alization of the formulas (^*^^' we already considered, as exhibited 
<^ by the following proposition: 

j Proposition 4.9. Let G be a graph, and let k,l,p,q,r G N. Then 

^ H '^w>p,x>q,y>r ^"'^ ^'^^2/ following condition holds: For 

any nodes w, Xk,yi € G, such that w has a p-step predecessor, x has a 

q — k-step successor and y has anr — l-step successor, G \= w — > Xk 
and G \= w — ^ yi, it follows that {xk, yi) is an edge in G. 

The above proposition immediately implies the following: 



Fig. 3. Simpli- 
fied formula 




Proposition 4.10. Let G 

striction of G to the set 



and let G' be the re- 



Fig. 4. The formula 

^ w^p ,x>q .y^r 



C := I w e G I maxdepth*^ {w) > p, maxheight*^ (w) > inax{q — k,r 

then G' \= ip'^^K 

This Proposition is one of the reasons why Corollary 3.11 is im- 
portant: We can use it together with Proposition 4.10 to restrict our 
attention to the vertices in the "middle" of the graph, and then talk 
about the formula ip'^^'- instead of 'f>w>p,x>q,y>r- This is the general 



approach for our NP-containment proofs, although some technical 
difficulties remain, as we will see in the proof of Theorem 4.13. 

There obviously is a close relationship between formulas of the form (p^^^ and formulas 
of the form p'^p y^^- In particular, this relationship allows the "lifting" of implications, 
as is shown in the following easy lemma. 
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Lemma 4.11. Let p,q,r,k,l,k' ,1' e N, and let (p^^'- imply (p^'^^' . Then V''w>l,,x>q,y>r 

p' •■= p, 

q' := k' + max(g — k,r — I), 
r' := + max(g — k,r — I). 

Proof. Let G be a graph satisfying 'p'^p x>q y>r- ^'^^ w^Xi^yi be the nodes in the graph 
connected as the nodes in the prerequisite graph of ^w>p',x>q',y>r'- Let G' be the graph 
G restricted to the set of vertices which have a p-step predecessor, and max{q — k. r — l)- 
step successor in G. Then, by choice of nodes, and Propositions 4.9 and 4.6, it follows 
that G' \= (p''^K Hence, due to the prerequisites, we know that G \= (p'' . In particular, 
since the nodes w^Xi^yi satisfy the prerequisite graph of 'p%,>pi x>q' y>r'i know that 
WjXkjVi & G'. Hence, it follows that {xk,yi) is an edge in G', and therefore it is an edge in 
G, as claimed. □ 

We need three more implications between formulas of this kind for our later NP-results; 

Lemma 4.12. Let p,q,r,k £N,k> 2, and let G be a graph. 

1. IfG^ ip''-*", then G \= (fp-'^\ 

2. IfG\= <^t>p,^>,,y>r, then G \= '^t>p^4g',j/>r" w'^ene 

p' := p, 

q' := k — 1 + max(g — k,r), 
r' := k^ + max(g — k,r). 

3. Let ken. Then ipP^^ implies ((P^^\ 

Proof. Let Wp, . . . ,w = xo, . . . ,w — yo, . . . be nodes in the graph fulfilling the prerequisite 
graph of the respective formulas. 

1. By the <^'=^°-property, it is clear that {yk,yo), {y2k,yk), {yk'^,y(k-i)-k) are edges in 

k 

G. Hence, G \= y^^ — > w. Again due to the property, it follows that {w, y^^) is an edge 
in G, as required. 

2. Consider the subgraph G' := G fl {w, Xi, . . . , Xk-i,yi, • • • , yfes}. By choice of p', q', r', 

every node in G' has a p-stcp predecessor, a q— fc-stcp successor, and an r-stcp successor 
in G. Hence, G' |= (p''^'^. Due to part 1, this implies that G' |= i^"^*^ . Hence, in G' there 
are edges (w, j/fc2), (^^2, j/afe^), • • • , {y(k-iyk^-,yk^)- Therefore, due to the i^'^^'^-property, 

it follows that {yi.3,w) is an edge in G'. Hence, it follows that G |= y^a Xk-i- The 
(^'^"'"-property implies that (xk-ijyk^) is an edge, as required. 

3. This follows from Lemma 4.20, since fc-transitivity implies k + k-{k—l) = A;^-transitivity. 

□ 

4.4 NP upper complexity bounds 

In this section, we prove NP-containment results for logics defined by universal Horn clauses. 
We show that "most" of the logics of the form K((^Jj,^p give rise to a satisfiability 

problem in NP. 

It is comparably easy to show that a logic of the form K((^'^^'^+^) leads to a satisfiability 
problem in NP, by carefully "copying" vertices and adding the correct neighbors. However, 
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while this process leads to a model which still satisfies (p^^^^^^ ^ it does not give the desired 
result that the problem can be solved in NP for all universal Horn logics which are extensions 
of K((^'^~*'^+^). In order to prove this, our model-manipulations must be consistent with the 
conditions of Theorem 3.3. In the proof of the following theorem, we construct a small model 
using only restriction. 

Note that the proof for this theorem is the only occasion where we actually prove the 
polynomial-size model property by explicitly constructing the model. All further NP-results 
make use of Theorem 4.13, by showing that the logic in question is an extension of one of 
the logics that this theorem deals with. For example, the logic K4B satisfies the conditions 
of this Theorem. It is therefore a central theorem for our complexity classification. 

The proof relies on one later result, namely the second case of Theorem 4.33. However, 
the proof for this case of Theorem 4.33 does not rely on any facts about the classification 
algorithm studied later. In the following, a graph G with root w is 7w-canonical if for every 

node a; e G, if G 1= w — ^ x and G \= w x, then i = j. Note that this does not mean that 
every node x is reachable on only one path from the root, but that all paths from the root w 
to X have the same length. We say that a graph G is canonical if it is w7-canonical for a root 
w of G. It is easy to see that a graph is canonical if and only if it can be homomorphically 
mapped onto a strict line. 

Theorem 4.13. Let if be a universal Horn formula implying <^^^p^>g y>r /'^'^ some 
k,P,q,r GN,k>l. Then K((^) has the polynomial-size model property, andl<.{(p)-5AT e NP. 

Proof. Due to Proposition 2.2, it suffices to prove the polynomial-size model property for 
K((p). Hence, let (t> be a K(93)-satisfiable modal formula, and, following Proposition 3.7, let 
M be a K((p)-model with root w such that M,w \= (p. Define maxline to be the maximal 
length of a strict line on which is satisfied, and maxline to be zero in the case that ip is 
satisfied on every strict line (note that due to Proposition 3.4, if ip is satisfied on the strict 
line of length i, then it is also satisfied on the strict line of length i — 1). This number is 
obviously a constant depending only on if. If (p is satisfied on every strict line, we can, due 
to Theorem 4.33, assume that M is w-canonical. Note that we will work with restrictions of 
the model during the course of the proof — since any restriction of a canonical graph having 
the same root is still canonical, the submodels we consider later are canonical as well. Now, 
define 

A := e M I maxdepth*^ {v) < p + k + 2^ U {w} , 

5 := |w e M I maxheight^ {v) > max(g - fc, r - fc - 1) | , 
C:={M\A)n S. 

The set C contains all the nodes in M which have "enough" predecessors and successors 
to ensure that the formula 'P^p'^^^g gives us all the necessary edges that we are interested 
in. To be more precise, we show the following fact; 

Fact 1 For all i>0, it holds that C \= 0^^^+^. 

Proof. It suffices to show the claim for i = 1. The result for arbitrary i then follows from 
Lemma 4.7, and the observation that ip^^^ is true in any graph. Hence, we show G \= (p^^"^ : 
Let w' ,Xi,yi,y2 be vertices from G, such that they satisfy the prerequisites of (f^^"^, i.e., 
let {w' , xi), {w' , yi), and (2/1,2/2) be edges in M. Since w' G G, we know that w' has a, k—1- 
step predecessor w" , which in turn has a p-step predecessor. Due to the edges mentioned 
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above, it obviously holds that M \= w" — > xi, and M \= w" — > 2/2- Since both Xi and 
1/2 are elements of C, they have the required number of successors, and therefore, since 
M 1= <^tl>pt|>q y>r^ Proposition 4.9 implies that j/2) is an edge in M, as claimed. □ 

Due to Lemma 3.8, we can assume, without loss of generality, that \A\ is polynomially 
bounded (in the length of </>). We can additionally assume, again due to Lemma 3.8, that 
the number of nodes v with maxdcpth*'^ (?;) < p + k + 3 is also restricted by a polynomial. 
Due to Proposition 3.7, we can also assume that every world in M can be reached from w 
in md (c^) steps. Therefore, we can choose a set G C M with the following properties: 

— G is polynomially bounded, 

— GCC, 

— for every node u £ A and every v £ C such that {u,v) is an edge in M, and every 
subformula ip of (j) such that M,v \= ip, there is a node v' G G such that (m, u') is an 
edge in M, and M, v' \= ip, 

— every node in C can be reached on a path from some node in G. Additionally, if is 
satisfied on every strict line, every node in C can be reached from some node in G on a 
path of length at most md {(p) . 

Such a set can be chosen with an application of the technique used to prove Lemma 3.8: 
Fact 2 A set G can be chosen with the properties above. 

Proof. First consider the case that (p is satisfied on every strict line. In this case, since M is 
t«-canonical, we know that A is exactly the set of vertices on the first p + k + 2 levels of M 

(the i-th level is the set of vertices v in M such that M \= w v. Note that a canonical 
graph can only have one root). Since M is w-canonical, we can simply choose G to be the 
set of those nodes at level p + k + 3 in the model M which are also elements of C. Since in 
a canonical model M, for each node v maxdepth*'^ (?;) is exactly the level of v in M, this is 
a set of polynomial size, and every path from w to a node in C passes through G. Further, 
every successor v G C of a. node u G A is trivially a member of G. Since every node in M 
can be reached from the root w in at most md (0) steps, the claim follows. 

Now consider the case where if is not satisfied on every strict line. For each world u £ M, 
let Fu := {V' £ sf {<p) \ M,u\= , and let W„ be a subset of successors of u in M such 
that for every tp £ F^, there is a world v £ Wu such that (u, v) is an edge in M, M, v \= ip, 
and \ Wu\ < |sf ((/>)|. If it is possible to choose v £ C, then do so. 

Define Mq := {w} , and for each i £ N, let Mj+i := UueMiWy, \ uj^gM, Now define M' 
to be the restriction of M to the worlds in UigN-^i- We show that M',w \= (j> hy proving 
that M' satisfies the conditions of Lemma 3.5. By construction, we know that w £ M' . Now 
let u £ M', and let V be a subformula of (p with M,u \= (}(f). Then (j) £ F^, and therefore 
there is a world v £ Wu with M, m |= (p. Since u £ M' , there is some i with u £ Mi. It 
follows that Wu C U}toMj C M' , and hence v £ M' as claimed. Since M' is a restriction 
of M, we know that M' also is a K((^)-model, and inherits all size restrictions on submodels 
that we have already established. Therefore, we can, without loss of generality, assume that 
M' = M. 

Now define G := Uf^o'''^MinG. By the proof of Lemma 3.8, since p + k + 3 is & constant, 

we conclude that G is polynomial in \(f>\. By construction, GCC. We prove that every node 
u £ C can be reached on a path from a node in C. For every u £ M, there exists a sequence 
of nodes w = uo,Ui, . . . ,Un = u such that for all relevant i, Uj+i £ Wy,., {ui, u^+i) is an edge 
in M, and Ui £ Mi \ U^~QMi. Let t be minimal such that ut £ C. Since w ^ C, it follows 
that t > 1, and we know that such a t exists, since Un = u £ C. It suSices to prove that 
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Ut S G. Since ut G C, it remains to prove that ut G Zq . Assume that this is not the 
case, from the above it then follows that t > p + k + 4:. By choice of nodes, we know that 
Up+k+3 has ap+fc + 3-step predecessor, and since Up+k+3 is a predecessor of u, Up+k+a also 
has a max(((j — k),{r — k — l))-step successor. Since Up+k+3 G Mp+k+3 \ M^, we know that 
Up_l_fc_l_3 ^ w, therefore it follows that Up+k+3 € C, a contradiction to the minimality of t. 

Now, let u G A, and let there be some v G C such that {u,v) is an edge in M, and 
M,v \= Tp for some ip G sf (</)). Since u G ^, we know that u = w or u does not have a 
p + k + 3-step predecessor, and hence u £ Mi for some i < p + k + 2. By construction of 
Mj+i, there is some world v' e U*ioMj which satisfies the requirements, since the successors 
are chosen to be from C if possible. Since v' e U^igMj n C C G, this proves that G indeed 
satisfies the conditions. □ 

For every g G C, we define to be the set Mg n C. Obviously, is a graph with root 
g, and is a restriction of C (recall that Mg is the restriction of M to all vertices reachable from 
5 on a directed path). Hence, Proposition 3.4 and Fact 1 immediately imply the following: 

Fact 3 Let g G C. Then M^ is a graph with root g such that M^ \= for all i > 0. 

For any g G C and i GN,we define 

Ll:={vGM^ \M^g^v}. 

We observe the following fact: 
Fact 4 Let g G C, i G f^, x G L^ , and y G if+i- Then {x,y) is an edge in M. 

Proof. This immediately follows from Fact 3 and the definition of Lf : By definition, it 

follows that C \= g x, and C \= g y. From Fact 1, we know that C \= and 
hence there is an edge {x, y) in C as claimed. □ 

Graphs fulfilling the formula (^^~*^ are "layered:" Whenever there are nodes x and y such 
that there is a path of length i from the root to i, and of length i + 1 to the node y, then 
there is an edge between x and y. From the definition, it is obvious that for any subgraph 
X oi C with root that X is canonical, if for every pair of natural numbers i ^ j, it follows 
that Lf n n X = 0. We make a distinction between those elements in G which lead to a 
canonical graph, and those which do not. In light of Lemma 3.6, it is natural that we do not 
need to look at the entire graph, but can ignore nodes which do not have "short" paths from 
the root of the graph leading to it. For a natural number b, we say that X is b-canonical, if 
for all < i < j < & it holds that Lf n n X = 0. 

We define the following: 



Gcan '■= {g G G \ Mg is md (<?!)) -canonical} , 
Gnon-can '■= {g G G \ Mg IS uot md {(j)) -Canonical} . 

It is obvious that G = Gcan + Gnon-can- For each g G Gnon-can, let i{g),j{g) denote 
natural numbers, and let 77.(17) denote some node such that n{g) G H L^j(^^y with < 
^(5) < j{9) ^ '^'^ {4) 1 and i{g) is minimal with these properties. In particular, observe that 
i{g) and j{g) are polynomial in |0| . 

We now show that for g G Gnon-can, the graph Mg \ M^^^^ still has root g, unless it 
is empty. It particular, this means that it makes sense to ask if these graphs are md ((/>)- 
canonical. 
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Fact 5 Let g G Gnon-can, such that Mg \ is not empty. Then Mg \ has root g. 

Proof. Assume that this is not the case, i.e., that there is some v e Mg \ and in this 

graph, there is no path from g to v. Since v is an element of , a path from g to v exists 
in the original model M. Let g ^ V\ ^ ■ ■ ■ ^ Vi ^ v he this path. Since the path does not 
exist in the graph Mg \ M^'^g-^ , it follows that one of the vj must be an element of M^^gs^ . 

Since there is a path from this vj to v, it follows that v is an element of Af^(g) as well, which 
is a contradiction. □ 

The nodes n{g) can be seen as "minimal non-canonical points" in . The following 

makes this more precise; 

Fact 6 Let g G Gnon-can- Then Mg \ M^^g-^ is md {(p)- canonical. 

Proof. Due to Fact 5, we know that M^ \ M^^g-^ has root g, and by definition this graph 
is a subset of C. Assume that it is not md (0)-canonical. Then there exist natural numbers 
«i < «2 < md {(f)) , and some node v G (Lf^ fl Lf^) \ M^^gy Due to the minimality of i{g), it 
follows that i{g) < ii, and hence i{g) < 12- In particular, it follows by induction on Fact 4 
that there is a path from n{g) G Lf^^g-^ to v G .L? , i.e., v G Mn{g)- is a contradiction. □ 

As our next connectivity result, we show the following: 

Fact 7 Let g G Gnon-can, o,nd let x G y G L^^^\ where ii and 12 are natural numbers 

such that 12 = zi + 1 mod {j{g) — i{g))- Then {x,y) is an edge in M. 

Proof. Since n{g) G L^^g-^HLj^g^ and j{g) > i{g), by induction on Fact 4 we know that M \= 

n{g) — ^^'^ n(g), and obviously this implies that for every multiple of j{g) —i{g), a path of 
that length exists in M from n{g) to n{g) itself. Now assume that 12 = ii + ^+j{j{g) — i{g)) 
for some integer j. We make a case distinction: 

Case 1: j > The above implies that M \= n{g) ^^^^'^^J^ ^^^^^ x, and by choice of j, we 
also know that M \= n{g) ^'^~^^^^^E}_^^^^^~^^ y Since all of the involved nodes are elements 
of C, and from Fact 1 we know that C \= (^'~*'+^ for all I > 0, this implies that there is 

an edge from a; to y in M, as claimed. 

Case 2: j < By choice of ii, we know that M \= n{g) — '-^ x. By choice of j, the above 

and since — j is positive, we also know that M \= n{gj — > y. 
Hence the existence of the edge (a;, y) again follows from Fact 1. 

□ 

We therefore have the following structure of the model M : By definition, M = AU 
C U M \ S, and by choice of G, every node in C can be reached on a path from a node in 
G. Therefore, C = Ug^cMg , and hence M can be written as the union of sub-graphs as 
follows: 



M = AU \J U U (M^^\Mf(^))U U M^^g^U{M\S). 

non-can non-can 

md(<^)— canonical md((^)— canonical 

Recall that the set G is polynomial in Due to Corollary 3.11, it suffices to restrict 
the "middle part" of this equation, i.e., the components except A and M\S, to polynomial 
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size in order to obtain the desired polynomial model. In order to do this, we will now prove 
further connectivity results for the sub-models ^n(g)- important to note that due to 
Proposition 3.4, all of these submodels inherit all of the properties of their respective super- 
models which can be expressed by a universal first order formula. 

The idea behind the construction is the following; For each node in the original model, 
we add enough successors in our new model to ensure that the new model satisfies the 
conditions of Lemma 3.6. For the md ((/))-canonical submodels, we know that we can stop 
adding nodes at depth md (</>) , since other nodes cannot be reached on a shorter path from 
the root. For the non-md ((?i)-canonical submodels, we cannot do this, but we also do not 
need to: Due to Fact 7, we have "circular" edges, hence we know that nodes in a "low" level 
also are in a "high" level. 

For the construction, let Gcan = {gi, . . . ,gn} , and let G„on-can = {gn+i, ■ ■ gn+m} , For 
1 < i <m, define gn+m+i ■= n{gn+i) (note that in this case, by definition gn+i is a member 
of Gnon-can)- For \ <i <n + 2m, define 



Ni:= < 



, if 1 < i < n, 

M^\Mf(g.^, i{n + l<i<n + m, 
M^, if n + m+ I < i < n + 2m. 



Note that by definition and Fact 5 it follows that Ni is a graph which is either empty 
or has root g^. It also follows from the above that for 1 < i < n + m, the graph TVj is 
md ((/))-canonical. Since the union over all Ni is the same as the union over all (for all 
g G G), it follows that 

M = Aui y Ni\uiM\S). 

\l<i<n+2m J 

Note that n + 2m is polynomial in , since G is. We need one helpful fact about the 
non-md (0)-canonical iVj-models: 

Fact 8 Let i e {n + m + 1, . . . ,n + 2m} , i.e., let be not md {(j))- canonical. Then = 

I j(Si-r,i)-i(Si-m) TQi 



Proof. The inclusion D is obvious, since Ni — M^'. For the inclusion C, let u E Ni. Since, 



by definition, gi = n{gi^m), and hence iV^ = M^, there is a minimal j e N such 



that u G L"'®' If j < i{gi) — i{gi), then the claim holds. Therefore, assume that j > 



jigi-m) - i{gi-m), and thus / := j - {j{gi-m) - «(.9«-m)) > 0. Since L"^^* ^ 



we 



also know that L^/f^""-* ^ 0, therefore let v e By definition, it holds that j = 

(./-I) + ! + (.? (5i-m)-«(.gj-m)), and in particular, j = (/-!) + ! mod {j{gi-m) -i{at-,n))- 
By Fact 7, we know that there is an edge from v G Lj/f to u e j^^idt-m) ^ This implies, 
by definition, that u € jj^ig^-m) ^ g^^^^ minimality of j, we know that j < j' , and hence 
j{gi-m) - i{gi-m) < 0, i.e., j{gi-m) < i{gi-m), a contradiction. □ 

We now define a series of models M, for < i < n -|- 2m, which, step by step, integrate 

"enough" vertices of the original model M to ensure that the formula (f) still holds, but 
restrict the size to a polynomial. As the induction start, we define Mq := A. For i > 1, the 
construction is as follows: 



— Add every world from Mi_i to M,, 
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— add Qi to Mi, 

— If 1 < i < m+n, i.e., if iVj is md (^)-canonical, then for each < j < md {(j)) + maxline+l, 
and each formula V € sf {(j)) : if there is a world v G Lj' such that M,v \= tp, then add 
one of these worlds into Mi. 

— Un + 7n+l<i<n + 2m, i.e., if iVj is not md (0)-canonical, then for each < j < 
j{g) — i{g) + 1, and each formula e sf (^) , perform the following: 

• If there is a world v G Lj* such that M,v \= ip, then add one of these worlds v into 
Mi. 

• If there is a world u which has been added into one of the md -canonical submodels 

in the step above, and there is a successor v € Lj' of u such that M,v \= (j), then 
add one of these worlds v into Mi. 

By construction, since j{g) and i{g) are polynomial in \(j)\ for each g e Gnon-can, and 
|sf < |0| , there are only polynomially many worlds in Mn+2m- We now define M' to be 
the model Mn+2m U (M \ S) . Then the set of worlds in M' which have max(g — k,r — k — 1)- 
step successor and a. p + k + 3-step predecessor is polynomially bounded, since this is a 
subset of M„+2m- Hence, due to Corollary 3.11, it sufiices to show that M', w; ^ ^ in order 
to exhibit a model of (p which is polynomial in size. In order to prove this, we show that 
M' satisfies the conditions of Lemma 3.6. Since w G Ahy definition and Mq = ^4, w is an 
element of M' by definition. Therefore, let u be an element of M' , and let ^/^ be a subformula 
of (j), such that M,u |= ()tp, and let a be a natural number such that M \= w — > u, and 
1 + a + md (tp) < md (0). It sufiices to show that there is a world v £ M' such that M,v \= xj), 
and (m, v) is an edge in M. 

Since M,u \= (}ip, there is a world v' G M, such that {u,v') is an edge in M, and 
M, v' \= tp. 

There are several cases to consider. If v' G A, then by the construction of M', v' is an 
element of M' as well. Hence wc can choose v to be v' . li u G A, and v' ^ A, then it holds 
that either v' G C or v' ^ S. If v' ^ S, then we know that v' G M', and we can choose 
V = v'. Hence assume that v' G C. In this case, by choice of G, there is a world v" G G, 
such that M, v" \= tp, and (u, v") is an edge in M. Since G C M', we can choose v = v" . If 
uG M\S, then v' gM\S holds as well. 

Therefore, it remains to consider the case u,v' G C. First, assume that there is no 
i G {1, . . . , n + 2m} such that u, v' G Ni. Since u G C, it follows that u G Ni for some i. 
Since v' ^ Ni, Ni must be md ((/))-canonical, since all other Ni contain all successors from C 
to nodes in Ni. It follows that u G Mg., and therefore v G Mg. holds as well. Since v' ^ Ni, 
there is a non-md ((^)-canonical submodel Nj such that v' G Nj = M^^^ and hence, due 

to Fact 8, there is some j' G {0, . . . , i{n{gj_m)) ^ i('T-(.9j-m))} such that v' G ]J^^^^-"^\ In 
this case, a node v fulfilling the requirements has been added to the model M' due to the 
last condition in the construction. Now assume that there is some i G {!,... ,n + 2m} , such 
that u, v' G iVi. If it is possible to choose this i in such a way that Ni is not md ((/))-canonical, 
then we do so. 

In particular, since {u,v') is an edge in M, there is some natural number j such that 

u G L^' , and v' G L^\i- If it is only possible to choose an i leading to a md ((;9)-canonical 
model Ni , then choose i and j in such a way that j is minimal with this property. We make 
a case distinction. 

Case 1: i G {n + m + 1, . . . , n + 2m} , i.e., Ni is not canonical. By Fact 8, due to the 
minimality of j, we know that j < j{gi-m)—i{9i-m)- Now, since u G Lj* and v' G i^+n it 
follows that j+1 < j{gi^m)~i{gi-m) + ^- Hence, by construction there is at; G L|^|_^nM', 
such that M,v \= tp, and due to Fact 4, there is an edge {u, v) in M. 
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Ccise 2: « G {1, . . . , n + m} , i.e., A^^ is md ((/))-canonical. If j + 1 < md (0) + maxline + 1, 
then, due to the construction of M' , a world v from satisfying ip was added in the 
construction, and due to Fact 4, {u, v) is an edge in M. 

Therefore, assume that j + l > md (((>) + maxline + 1, i.e., j > md + maxline + 1. Since 
Ni is md ((/>)-caiionical, we know that u cannot be reached from gi with a path shorter 
than md (^) steps. Due to the choice of i and j, we also know that u does not appear in 
a non-md ((/))-canonical submodel (otherwise, since the non-md ((/))-canonical submodels 
are successor-closed there would be a non-md (^)-canonical submodel Ni containing both 
u and v', and we would have chosen this), and that in each md ((^)-canonical submodel 
where u appears, it has depth of at least md {(j)) + 1. 

If (f is satisfied on every strict line, we know that every node from C can be reached 
from an element in G with at most md {(j)) steps, which is a contradiction. 
Now consider the case that (p is not satisfied on every strict line. Since in the md (</>)- 
canonical submodels, strict lines having the length of the depth of the submodel appear, 
and (fi is satisfied in M, we know that these submodels cannot have depth of more than 
maxline. Therefore, we know that j + 1 < maxline, a contradiction. 

Hence, we know that M',w \= (j), concluding the proof of Theorem 4.13. □ 

We will now show that Theorem 4.13 implies NP-results for a number of related logics. 
The following theorem shows that modal logics for classes of frames which fulfill a natural 
generalization of the Euclidean property have the polynomial-size model property, and hence 
can be solved in NP. Note that the case k = 1 = 1 oi Corollary 4.14 follows from the main 
result of [HR07]. Our results and theirs are incomparable: They achieve the NP-result for all 
normal modal logics extending what in our notation is K((^^^^), where our results only hold 
for logics defined by universal Horn clauses (although the proof of Theorem 4.13 in most cases 
gives the NP-result for all extensions of the logic which are defined by universal formulas over 
the frame language — the only exception is the case where the graph formula is satisfied on 
every strict line, note that this case needed special treatment in the proof of Theorem 4.13, 
and relies on the tree- like property for these logics proven later in Theorem 4.33). We 
achieve NP-results for many logics which are not extensions of K{(p^^^), but do not prove 
these results for all extensions of these logics. 

With the preceding theorem and the results on the implication for formulas of the form 
'P'^p,x>q,y>r^ wc obtain the following corollary: 

Corollary 4.14. Let (p he a universal Horn formula implying V'^">p x>q y>r Z^'' some 
k,l,p,q,r € N, such that one of the following conditions holds: 

- l<k,l. 

- I = and k>2. 

Then has the polynomial-size model property, and K((^)-SAT e NP. 

Proof. First assume that 1 < k,l. Lemma 4.7 shows that ip'^^^ implies (f'^ ^'^ for some 
k' > I. From Lemma 4.11, we conclude that 'p'^l,x>q.y>r implies 'ftyly .x>q' .y>r' ^o'" some 
natural numbers p',q', and r'. Therefore, if also implies <^^>^^ ^>g/ y>r'i ^^'^ '^^^ Theo- 
rem 4.13, K((^) has the polynomial-size model property and K(<,2i)-SAT e NP. 

For the case I = and k > 2, observe that due to Lemma 4.12, K(<^) is also an extension 
of ^{V'^^p\x>q',y>r') ^'-'^ some Constants p',q',r'. Due to the prerequisites, it holds that 
l<fc — l<fc^ — 2. Hence, the result follows from the case above. □ 



26 Edith Hemaspaandra and Henning Schnoor 



Corollary 4.14 covers all cases obtained from formulas of the form 'f>^w>p x>q y>r "^hcre 
we possibly could expect the polynomial size property to hold: The requirement demanding 
that fc > 2 is crucial, since the formula 0^^^ is satisfied in any symmetric graph, and hence 
satisfiability problems for the corresponding logics arc PSPACE-hard due to Corollary 2.5. 
Additionally, logics defined by formulas of the form t^"^*^ are PSPACE-hard as well: This 
formula is satisfied in every reflexive, transitive graph, and therefore the complexity result 
follows from Theorem 2.8. We therefore have proven that for Horn formulas defined by these 
single clauses, as soon as they are not satisfied in various combinations of strict, transitive, 
reflexive, and symmetric trees, they already imply the polynomial-size model property. 

Up to now, we only considered the effect of a single universal Horn clause. However, 
there are many cases where the logics defined by individual formulas have a PSPACE- 
hard satisfiability problem, but the complexity of the problem for logic defined by their 
conjunction drops to NP. A well-known example for such a case is the modal logic K4B, 
which is the logic over graphs which axe both symmetric and transitive. On their own, both 
of these properties lead to PSPACE-hard logics, but their conjunction gives a logic which is 
in NP. In our notation, it can easily be seen that K4B = \<.{ip^^^ A (fP^"^). For this concrete 
example and many generalizations, the following Theorem gives this result. 

Theorem 4.15. Let /c > 2 e N, and let pi,qi,ri,p2,q2,r2 & N. Let (p he a universal Horn 
formula such that (p implies i>]j;>^p^^x>qi,y>ri^'Pty^p-2,x>q-2,y>r2- ^^^n has the polynomial 
size model property, and K((^)-SAT e NP. 

Proof. We first prove that ip^^° A ifP^^ implies i^'^^^'^-'^)^ if k is odd, and (^2^(fe-i)fe^ jf 
k is even. Let G be a graph satisfying ip^~*^ A p'^^^ , and let w = Xf),xi (,X2 if k is even) 
and If = j/O) • • • ; y{k-i)k ()•••) if k is even) be nodes in G such that (xj, Xij^i) and 

{yi,yi+i) are edges for all relevant i. First, let k be odd. Since G \= <fi^^^, it follows that 
G is symmetric. By applying the (^'^^'^-propcrty fc — 1 times, wc get a path of length k — 1 

k 

from w to y(k-i)k- Hence, since {xi,w) is an edge, it follows that G \= Xi — > 2/(fe-i)fe) and 
due to the (^'^^'^-property, this implies that {xi,y(^k-i)k) is an edge as required. 

Now let k be even. Since k = mod 2, and k > 2, the symmetry of G ensures that 
there is a path of length k from w to X2. Hence, there is an edge (w,X2), and due to the 
symmetry of G, an edge {x2,w). By (fc — 1) applications of the (p'^^'^ -property, we know that 
G \= w — > j/(fe-i)fc2- Hence, we conclude that G \= X2 — > y(fe-i)fe2, and another application 
of the (^^^'^ -property gives the edge {x2,y(k-i)k^)i as required. 

For the NP-result, observe that '^i,>°i,x>gi,y>ri ^^lZ:p,,a:>q2,y>r2 implies ^i,>^,^>g,j,>^ A 
'f'^p,x>q,y>r^ where p = max(pi,p2), q = niax(gi, ^2), and r = max(ri, r2). Due to the above 
and Lemma 4.11, we know that this formula implies V'^'pi^>q' ^y>r' for some p',q',r' if fc 

is odd, and it implies f>'^'pi~x->q" y>r" some p",q",r" if fc is even. Further, if fc is odd, 

then it follows that fc > 3. Hence, (fc— l)fc > 6. If fc is even, then, since fc > 2, we know that 
(fc — l)fc^ > 4, and in both cases the NP result follows from Corollary 4.14. □ 

Theorem 4.15 concludes our results about logics defined by specific Horn formulas. We 
now have collected all tools required to prove the main result of the paper, the complexity 
classification of satisfiability problems for logics defined by universal Horn formulas. 

4.5 The Main Result: A Dichotomy for Horn Formulas 

In this section, we show a dichotomy theorem, which classifies the complexity of the sat- 
isfiability problem for logics of the form K^tp), where ^jJ is a, conjunction of universal Horn 
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clauses, into solvable in NP and PSPACE-hard. The classification is given in the form of the 
algorithm Horn-Classification presented in Figure 5. In order to explain the algorithm, 
we need some more definitions. 

For a set types-list C jrefl, symm, trans'^ | k € N} , we say that a graph G satisfies 
the conditions of types-list if it has the corresponding properties, i.e., if ref 1 G types-list, 
then G is required to be reflexive, if symm e types-list, then G is required to be symmet- 
ric, and if trans'^ G types-list, then G is required to be /c-transitivc. A types-list-trcc is a 
graph which can be obtained from a strict tree T by adding exactly those edges required 
to make it satisfy the conditions of types-list (note that this is a natural closure operator). 
Similarly, a types-list-Vme is the types-list-closnve of a strict line. Finally, for a universal 
Horn clause tp, let types-list — T^°™ denote the pairs (a, T) such that T is a types-list-tree, 
and a: prereq((^) — > T is a homomorphism. Intuitively, due to Proposition 4.3, this is the 
set of types-list-trccs about which the clause ip makes a statement, along with the corre- 
sponding homomorphisms. We first define the cases of universal Horn clauses leading to 
NP-containment of the satisfiability problem: 

Definition 4.16. Let (p he a universal Horn clause, and types-list C 
{ref 1, symm, trans'" | fceN}. We say that {if , types-list) satisfies the NP-case, if one 

of the following occurs: 

1. conc(<^) = {x,y) for x ^ y € prereq(<^) , and there is {a,T) e types-list-T^""^ such that 
there is no directed path connecting a{x) and a{y) in T, 

2. types-list-T^""" ^ 0, and cone ((p) = or the vertices from cone ((p) are different and not 
connected with an undirected path in prereq (<p) ( this also applies if x or y do not appear 
in prereq {(p) ) 

3. cone (i^) = {x, y) for x,y G prereq {(p) , and there is a homomorphism a : prereq {(p) L, 
where L is the types-list-line (xi, . . . , a;„), and there are i,j such that I < i < j — 2 such 
that a{x) = Xj and a{y) = Xi. 

4- cone (i^) = {x, y) for x,y G prereq (i^) , and there exist types-list-lines Li = {xq, . . . , x„J 
and 1/2 = (j/O) ■ • • : yn2) 0,'nd homomorphisms a\ : prereq ((p) L\, a.^'- prereq ((p) L^, 
such that OL\(x) = Xi^, and ai(y) = Xi^-\, ai(x) = yi^, and 0.2(11) — Vi-i+k-, where k>2. 

We now define the properties of Horn clauses which do not lead to NP-containment of 
the satisfiability problems on their own. Recalling Section 2.2, it is natural that clauses 
which are satisfied in every refiexive, transitive, or symmetric tree are among these. This is 
captured by the following definitions: If is a universal Horn clause with cone {(p) = {x, y) 
for x = y 01 x,y G prereq ((^) , we say that (p, types-list) satisfies the refiexive case, if x ^ y 
or for every {a,T) G types-list — T^o™ such that {a{x),a{y)) is not an edge in T, it holds 
that a{x) = a{y). {p, types-list) satisfies the transitive case for A; € N, if it does not satisfy 
the reflexive case, and for every {a,T) G types-list — T^°™ such that {a{x),a{y)) is not an 
edge in T, there is a path from a{x) to a{y) in T, and there is some (a, T) G types-list-T^""^ 
such that there is no edge {a{x), ct{y)), and a{y) is exactly k levels below a{x) in T. Finally, 
{(f, types-list) satisfies the symmetric case if it does not satisfy the reflexive of the transitive 
case, and for every {a,T) G types-list-T^°™ such that {a{x),a{y)) is not an edge in T, there 
is an edge {a{y),a{x)) in T. 

We can now state the classiflcation theorem — the proof will follow from the individual 
results in this section. Note that the algorithm as stated can not be implemented directly, 
since it uses tests of the form if a given first-order formula is satisfied in certain infinite classes 
of graphs, and checks if certain elements are present in the infinite set types-list — T^°™. 
However, we believe that size-restrictions for the structures actually required to look at can 
be proven, and hence the algorithm hopefully can be implemented to give a deterministic 
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decision procedure. However, the main usage of the algorithm is to show more general 

classification theorems, as we will see in Corollary 4.29. 

Theorem 4.17. Let ijj be a conjunction of universal Horn clauses. Then the complexity of 
K(V')-SAT is correctly determined by Horn-Classification. 

A first look at the algorithm in Figure 5 reveals that it is obviously necessary to prove that 
the choices that the algorithm has to make always can be made: in the relevant situations, at 
least one of the "reflexive," "transitive," or "symmetric" conditions occurs. However, before 
starting with the proof, we explain the general idea of the algorithm and give an example 
for a logic which HoRN- CLASSIFICATION proves to have a satisfiability problem in NP. 

1: types-list := 

2: while not done do 

3: if every clause in V' is satisfied on every types-list-tree then 

4: K(0)-SAT is PSPACE-hard 

5: end if 

6: Let ip he a clause in il) not satisfied on every types-list-tiee 

7: if {ifi, types-list) satisfies the NP-case then 

8: K(V)) has the polynomial-size model property, and K('^)-SAT € NP. 

9: else 

10: cone (<^) = {x, y) for x = y or x, y e prereq (ip) 

11: if (if), types-list) satisfies the reflexive case then 

12: types-list := types-listU {refl} 

13: else if ((^, types-list) satisfies the transitive case for k >2 then 

14: types-list := types-list U {trans''} 

15: else if {tp, types-list) satisfies the symmetric case then 

16: types-list := types-listU {symm} 

17: end if 

18: end if 

19: if for some k, {symm, trans*} C types-list then 

20: K('!/j) has the polynomial-size model property, and K('!/))-SAT € NP. 

21: end if 

22: end while 

Fig. 5. The algorithm Horn- Classification 

In the variable types-list, the algorithm maintains a list of implications of the formula 
ip. For example, Horn- Classification puts refl into types-list if it detects the formula ip 
to require a graph satisfying it to be "near-reflexive" (meaning, reflexive in all nodes with 
sufficient height and depth). Similarly, symm € types-list means that requires a graph to 
be "near-symmetric," and trans'^ G types-list means that ?/> requires a graph to be "near-fc- 
transitive" (this will be made precise in Lemma 4.27). 

If at one point HoRN- CLASSIFICATION detects that a clause ip satisfies one of the NP- 
conditions, then this means that the clause 0, in addition with the requirements kept in 
types-list, implies a graph-property which leads to the polynomial-size model property. It is 
well-known that the modal logic over the class of frames which are both transitive and sym- 
metric has a satisfiability problem in NP. Generalizing this, when Horn-ClassIFICATION 
detects that ip requires "near-symmetry" and "near-fc-transitivity," this also leads to the 
polynomial-size model property and thus to NP-membership of the satisfiability problem, 
applying Theorem 4.15. 



On the Complexity of Elementary Modal Logics 



29 




Fig. 6. Example formula 



As an example, let be the universal Horn 
clause with prerequisite graph as shown in Fig- 
ure 6, with cone {(f>) = {x, y), and let ijj be the 
Horn formula having ip as its only conjunct. 
The algorithm Horn-Classification starts 
with types-list = 0, and hence in its first itera- 
tion, checks if ip is satisfied in every strict tree. 
This is not the case, as Figure 7 shows (here, 
we simply marked each note with the names of 
the vertices which are preimages of the homomorphism) : This is a homomorphic image of 
prereq {(f) as a strict line (which in particular is a strict tree), in which the images of x and 
y are not connected with an edge. Therefore, (p is not satisfied in this line, and hence not 
in every strict tree. However, it is clear that if we want to map prereq ((^) into a strict tree, 
then all the vertices between s and t must be "pairwise identified," just like in Figure 7. 

Therefore the transitive case is satis- 
fied, and the figure shows that this is 
true for A: = 3 (among possibly others). 
Hence Horn-Classification adds the ele- 



Fig. 7. Homomorphic image as strict line 



ment trans^ to types-list. Next it checks if ip 



is satisfied in every {traiis'^}-tree. This again 
is not the case, and the homomorphic image of 
prereq (tp) as a |trans^}-line in Figure 8 shows 
that (f satisfies NP-condition 3 (we only included those lines added by the trans^-closure 
that are required for our function to be a homomorphism). Therefore, the logic K(<^) has 
the polynomial- size model property, and its satisfiability problem is in NP. 

This example demonstrates that in the run of Horn-Classification, a clause ip can 
meet different cases depending on the content of the variable types-list : In the situation that 
types-list = 0, the clause ip satisfies the transitive case, but when types-list = {trans^} , this 
is no longer the case. 




0- — <d) — <f) — ^2) — 'df — O — O — A5) — — — — 

Fig. 8. Homomorphic image as {traiis^}-line 



As mentioned above, the first fact that we need to prove about Horn-Classification 
is that it is well-defined, that is, the case distinction between the "reflexive," "transitive" 

and "symmetric" cases is complete. 

Lemma 4.18. Horn-Classification is well-defined: in all relevant situations, at least 
one of the "reflexive," "transitive," and "symmetric" cases occurs. 

Proof. Assume that the algorithm is not well-deflned, and let -ijj be an instance for which 

the algorithm behavior is unspecified. Let iphe a, clause for which none of the NP-conditions 
and none of the refiexive, transitive, and symmetric conditions hold. Let types-list be as 
determined by Horn-Classification when encountering cp. 

Since the algorithm only chooses (p if ip is not satisfied on every types-list-tree, we know 
that due to Proposition 4.3, there is some {a,T) e types-list — J|^°™. Now assume that 
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cone ((^) = or cone ((^) = for x ^ y, and x,y do not both appear in prereq((^). 

Then NP-eondition 2 is satisfied, and we have a contradiction. Therefore we know that (p is 
a universal Horn clause such that cone {(p) = {x, y) for some variables x, y such that x = y 
or x,y e prcrcq {(f) Since the reflexive case does not apply, we know that x ^ y, and hence 
x,y € prereq {tp) . 

Since NP-condition 1 does not apply, we know that for every 
there is a directed path connecting a{x) and a{y). 

Since the transitive case does not apply, wc know that there is some (a, T) € types-list — 
jihom jj-^ which there is no path from a{x) to a{y). We therefore know, by the above, that 
there is a path from a{y) to a{x) in T. Hence, T is not symmetric. Since T is a types-list-tvee, 
we know that symm ^ types-list. 

Since there is a path from a{y) to a{x) in T but not vice versa, we know that a{x) ^ o:{y), 
and since there is a path from a{y) to a{x) in the (possibly reflexive and/or 5-transitive for 
some set S) tree T. this implies that a{x) is on a lower level in T than a(y). Let k denote 
the difference in levels between a{x) and a{y), then k > 1. By mapping T into a types-list- 
line ii = (xo, . . . ,Xni) with the homomorphism /3 assigning each vertex u the element Xi, 
where i is the level of u in T, wc can, using the homomorphism ai := (3 o a, map prereq (cp) 
homomorphically into Li in such a way that ai{x) = Xi, and ai(y) = Xi-k, where i denotes 
the level of a{x) in T. 

If fc > 2, then the line Li satisfies NP-condition 3, a contradiction. Therefore, we know 
that A: = 1, and thus ai and Li satisfy NP-condition 4. 

Since also does not satisfy the symmetric case, we know that there is some (a, T) € 
types-list-T^""^ such that there is no edge {a{x),a{y)) and no edge {a{y),a{x)) in T. By 
NP-condition 1, we know that there is a directed path connecting a{x) and a{y) in T. 
Since symm ^ types-list, and T is a types-list^-tiee, we know that T is not symmetric. If 
refl G types-list, and T is a types-list-trcc, this implies that T is reflexive, and hence 
a{x) ^ Q;(i/). If refl ^ types-list, then we know that, since symm also is not an element of 
types-list, that no node in T is connected to itself with a directed path, and therefore we 
also know that a(x) =/= a{y). Now assume that there is a path from a{y) to a{x) in T. Then 
the shortest of these paths must have length k>2 (since there is no edge {a{y),a{x)) and 
therefore we can map T (and therefore prereq (s^)) homomorphically into a line L\ as in the 
case above, where the distance of the image of a{x) and a{y) is k, and since a{y) is mapped 
to a predecessor of a{x), this line satisfies NP-condition 3, a contradiction. Therefore we 
know that in T, there is a directed path from a{x) to a{y). Since {a{x),a{y)) is no edge in 
T, we know that the shortest of these paths must have length > 2. Since T is not symmetric, 
this implies that a{y) must be on a lower level in T than a{x), and the difference in levels 
is > 2. Similarly, to the above, we can construct a types-lislAvae L2 = (xq, . . . ,a;„2) and a 
homomorphism /?: T ^ L2, such that for v G T, if i is the level of v in T, then /3(w) = x^. Let 
a2 denote the homomorphism /3 o a. Due to the choice of k and the definition of /3, we know 
that a2{x) = Xi, and a2{y) = Xi+k for some i, and hence 02 and L2 satisfy NP-condition 4. 
Since above, we already constructed ai and Li satisfying NP-condition 4, this implies that 
(f satisfies NP-condition 4, a contradiction. 

Also note that in the transitive case, a fc > 2 can always be chosen: Since by construction 
of the algorithm, (f is not satisfied on every types-listrivee, there is some (a, T) such that 
{a{x),a{y)) is not an edge in T. Since the reflexive case does not apply, we can choose (a, T) 
in such a way that a{x) ^ oi{y). Due to the transitive case, there is a path from a{x) to 
a{y) in T, and hence the shortest of these paths must have length of at least 2, hence the 
difference of levels is at least 2 (we know that even if symm G types-list, a{y) must be below 
a{x) in T, otherwise NP-condition 3 would apply). □ 
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Now that wc know that Horn-Classification is wcU-dcfincd, wc show that it always 
comes to a halt and hence, generates an answer — this is not immediate: Note that in the 
example formula from Figure 6 discussed above, we already saw that it is possible for the 
algorithm to revisit a clause. Therefore one might consider it possible for the algorithm to 
repeatedly add the same element to the variables types-list without coming to a halt, or 
the list types-list to grow infinitely. In order to show that this does not happen, we prove a 
bound on the number of the elements that can be added into this list during the run of the 
algorithm. 

A first helpful tool to show this is the following Proposition, which says that there are 
no "redundant" transitivity conditions which get added to types-list. 

Proposition 4.19. Let trans'^ be added to the variable types-list by 
Horn-Classification. Then types-list did not imply k-transitivity before adding trans*^. 

Proof. Assume that type,s-list already implied trans'^. Since trans'^ is added by 
Horn-Classification, there is a clause (p with conclusion edge (x, y) for x,y & prereq {0) 
which satisfies the transitive condition for k at this point of the algorithm's run. Therefore, 
there is some (q:,T) G types-li.st-T^°"^ such that {a{x),a{y)) is not an edge in T, and a{y) 
is exactly k levels below a{x). Since by the assumption the conditions of types-list already 
imply fc-transitivity, the fc-step path from a{x) to a{y) implies that {a{x),a{y)) is an edge 
in T, a contradiction. □ 

Now that we know that transitivity conditions which were already implied by the con- 
ditions present in types-list do not get added to the list, there is a clear strategy how we 
can prove that types-list does not grow infinitely: We first prove just how many transitivity 
conditions are implied by the conditions in types-list, and then show that from a certain 
point on, everything that will be added to types-list by HORN- CLASSIFICATION already is 
implied. In order to prove this, we need some technical results about implications of various 
forms of 5-transitivity. 

Lemma 4.20. Letki,k2 G N. Then {ki,k2} -transitivity implies {k2 -\- 1 • (ki — l)) -transitivity 
for all I > 0. 

Proof. We show the claim by induction on I. For I = 0, this holds trivially, since {ki,k2}- 
transitivity by definition implies /.■2-transitivity. Now assume that it holds for I, let G be 
some graph which is {fci, A:2}-transitive, and let uq, . . . , Ui:2_|_(;_|_i).(fej_i) be nodes in G such 
that {ui. Ui^i) is an edge for all relevant i. We need to show that (mq, Mfc2+(;+i)(fei-i)) is an 
edge in G. Since by the induction hypothesis, {ki, A:2}-transitivity implies (^2 + I • (^i — 1))- 
transitivity, we know that G is (fc2 + I ■ {ki — l))-transitive. Therefore there is an edge 
(mq, ^*fe2+i (fei-i)) ^- -^y choice of Ui, there is a {ki — l)-step path from Uk2-t-i-(ki-i) to 
Mfc2+(;+i) (fei-i)- Therefore there is a fci-step path from uq to Mfc2+('+i) (fei-i)j ^.Tid since G 
is fci-transitive, this implies that (uq; Wfe2+(i+i)-(/si-i)) is an edge in G, as required. □ 

Lemma 4.21. Let m,ki,ei,d G N such that (fci — 1) = ei ■ d. Then 
{ki, m,m + d, . . . ,m -\- (ei — 1) • d} -transitivity implies (m + I ■ d) -transitivity for all I > 0. 

Proof. Let I = p-ei+r for somep,r G N, r < ei. Then m-\-l-d = m-\-{p-ei-\-r)-d = m-\-r-d-\- 
pei-d = m+r-d-\-p{ki — 1). Since r < ei, we know that {fci, m, m + d, . . . , m + (ei — 1) • d}- 
transitivity implies (m + r • (i)-transitivity. By Lemma 4.20, we know that {fci, m + r • d}- 
transitivity implies {m,-\-r ■ d-\-p{k\ — l))-transitivity, and since fci-transitivity is obviously 
implied by the prerequisites, this proves the Lemma. □ 
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Lemma 4.22. Let (fci — I) ~ ei ■ d, and let uq, . . . , n^-^-i € N such that ni = rij mod d, 
and for i ^ j, rii ^ rij mod (fci — 1). Then there exists some m G N such that m = Ui 
mod d such that {fci, no, . . . , rie^-i} -transitivity implies {m + I ■ d) -transitivity for all I > 0. 

Proof. Let 5 := {fci,no, . . . ,nej_i} , and let Ui = ai ■ (fci — 1) + n^, where n' < fci — 1. 
Due to Lemma 4.20, {fci, r7;}-transitivity implies {ui + I ■ (fci — l))-transitivity for all / > 0. 
Therefore we can choose a := max {ao, . . . , ttei-i} , and we know that >5-transitivity implies 
(a • (fci — 1) + n^-transitivity. Since for all I, rij + Z • (fci — 1) is equivalent to n, modulo 
fci — 1 and modulo d (since d divides fci — 1), we can assume without loss of generality that 
rij = a • (fci — 1) + for all < i < ei — 1. 

Let n'^ = ti ■ d -\- r, where r < d. Such numbers tt exist, since rij = nj mod d for all i,j. 
Since < fci — 1, we know that • + r < fci — 1 = ei • d, and therefore < ei — 1 for all 
< i < ei - 1. 

Define rn := a • (fci — 1) + r. Note that since d divides fci — 1, this implies that m = r 

mod d. For the Ui it holds that = a • (fci — 1) + n^, and again, since d divides fci — 1, 
we have that rij = rij mod d. Now since rij = tj • d + r, it follows that rij is equivalent to r 
modulo d, and hence m and rij are equivalent modulo d for all i. Now note that 

rij — m = a • (fci — 1) + rij — a • (fci — 1) — r = rij — r = fj • d + r — r = tj • rf. 

Therefore, since ^-transitivity implies rij-transitivity for all i, we know that 5'-transitivity 
implies (m + ti ■ (i)-transitivity for all i. Since ti < ei — 1, and for i ^ j, it also holds 
that ti ^ tj (otherwise it would follow that rij = n' and hence contradic- 
tion), it follows that {to, . . . , fei-i} = {0, . . . , ei — 1}. We therefore know that for each 
r € {0, . . . , ei — 1} , 5-transitivity implies (m + i • d)-transitivity, and since fci e S, the claim 
follows from Lemma 4.21. □ 

The following lemma is the final of our results about implied transitivity conditions. 
Its technical formulation hides the fact that the statement of the lemma is actually rather 

natural. As an example, consider the case where fci = 5, and fc2 = 7. Then gcd(fci — 
1, fc2 — 1) — 2, and then the lemma says that there is some odd number m such that 
for all odd numbers m + 2 • Z, {5, 7}-transitivity implies (m -|- 2 • Z)-transitivity. The key 
idea is that then, once trsois^ and trans^ are elements of types-list, we know that due 
to Proposition 4.19, Horn-Classification does not add any more trans'^-conditions to 
types-list anymore for odd fcs which are greater than or equal to m. Therefore there are only 
finitely many odd fcs such that Horn-Classification can add trans'^ from this point on. 
If Horn-Classification would add an infinite number of trans'^-conditions, then one of 
them must therefore be one where fc is even. Assume that this already happens with k^, 
i.e., that is an even number. Then fcs — 1 is odd, and therefore the greatest common 
divisor of fci — l,fc2 — 1, and k^ — I is 1. By the lemma, we therefore know that there is 
some rn such that {5, 7, fcaj-transitivity implies m'-transitivity for all m' > m, and then 
Horn-Classification can only add trans'^-conditions for fc < m', and this is only a 
finite number of possibilities. Thus we know that Horn-Classification must stop adding 
transitivity conditions at some point. 

With the above proof-strategy in mind, it is clear that the statement of the fol- 
lowing lemma is crucial in restricting the number of trsois'^-conditions added by 
Horn-Classification. 

Lemma 4.23. Let fci,...,fc„ e N, and let d := gcd((fci — l),...,(fc„ — 1)). Then there 
exists some m G N such that m = 1 mod d and {fci, . . . , kn} -transitivity implies (m + Z • d)- 
transitivity for all I > 0. 
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Proof. Let S = {fci, . . . , kn}- Wo show the claim inductively on n. If n = 1, then d = fci — 1, 
and by Lemma 4.20, {fci, A;i}-transitivity implies {ki + I ■ (fci — l))-transitivity for all / > 0, 
hence the claim follows with m = k\. 

Since we need the case n = 2 explicitly in the induction, we prove it individually. Hence 
let n = 2, and let {ki — 1) = Cj • d, where gcd(ei, 62) = 1. 

Prom Lemma 4.20, we know that fc2}-transitivity implies ki+i-{k2 — '^) = i-k2+k\—i- 
transitivity for all i>Q. Now note that for all < i < ei — 1 : 

i • ^2 + (fci - i) = i • (^2 - 1) + (fci - 1) + 1 = i • 62 • + ei • d + 1 = • (i • 62 + ei) + 1 =: rij. 

Due to Lemma 4.22, it suffices to show that all of these Ui are equivalent to 1 modulo d, 
and for < « < j < 61 — 1, rij rij mod (fci — 1). It is obvious that all rij are equivalent to 
1 modulo d. Now assume that there are 0<i<j<ei — 1 such that rii = iij mod (fci — 1). 
Then the following holds: 



This is a contradiction, since due to the above, we know that < j — i < 61 — 1. This 
completes the proof for the case n = 2. 

Now inductively assume that the lemma holds for n > 2. Let d' := gcd(fci — 1, . . . , fc„ — 1). 
Recall that d = gcd(fci — 1, ... , fc„+i — 1). We first show that d = gcd(fc„+i — 1, d'), which 
is a standard fact from number theory. Obviously, d divides both fc„+i and d', and hence 
d I gcd(fc„+i — 1, d'). On the other hand, let g be a common divisor of fc„+i — 1 and d' . Since g 
divides d' , g is also a divisor of fci — 1, . . . , fc„ — 1, and since g divides fc„+i — 1, it is a common 
divisor of all fcj — 1. Therefore, g \ d. In particular, this holds for g = gcd(fc„+i — 1, d'), and 
therefore gcd(fc„_|.i — l,d') \ d. Since the other direction holds due to the above, we have 
shown that d = gcd(fc„+i — 1, d'). 

Due to the induction hypothesis, we know that there is a natural number m' such that 
to' = 1 mod d' , and for all > 0, S'-transitivity implies (to' + I' ■ (i')-transitivity. Let 
m' = q ■ d' + 1, and let I' be a natural number such that gcd(g + I' , fc„+i — 1) = 1. Then, 
by choice of m', we know that S'-transitivity implies (to' + I' ■ rf')-traiisitivity. Let e := 
gcd(TO' + I' ■ d' — l,fc„+i — 1). Since S'-transitivity also implies fc„-|_i-transitivity. we know 
from the case n = 2 that there exists a natural number to such that to = 1 mod e, and 
for all I > 0, S-transitivity implies (to + / • 6)-transitivity. In order to prove the lemma, it 
therefore suffices to show that 6 = d. It holds that 

6 = gcd(TO' + Z'-rf'-l,fc„+i-l) =gcd(g-rf' + l + /'-d'-l,fc„+i-l) = gcd((g+Z')-d',fc„+i-l). 

Since is a divisor of d' and of fc„+i — 1, it follows that d \ e. On the other hand, 6 is a 
common divisor of {q + I') ■ d' and fcn+i — 1. Since gcd{q + V , fc„+i — 1) = 1, we know that e 
divides d' . Since e also divides fc„+i — 1, this implies that 6 is a divisor of gcd(d', fc„+i — l) = d. 
Therefore e \ d and d \ e, and hence we have proven that 6 = d, as claimed. □ 
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Wc can now prove that there are only finitely many additions of the form trans during 
the algorithm's run, using the arguments from the discussion before Lemma 4.23: 

Lemma 4.24. Let t/j be a universal Horn formula. Then Horn-Classification, on input 

tp, only adds finitely m,any conditions of the form trcois'^ to types-list. 

Proof. Assume that this is not the case. Due to Proposition 4.19, we know that each added 
trans^'-element is not implied by the previous elements, in particular, no element is added 
twice. Hence there is an infinite sequence (fc„)„gN such that all trans'^" are added to 
types-list, they are added in this order, and for n ^ uij we have kji ^ km- 

For n e N, let d„ := gcd(fci — — 1). Then d„ is obviously decreasing, and 

bounded by 1. Therefore, the sequence converges, i.e., there is some d, no € N such that 
dn = d for all n > no- Due to Lemma 4.23, we know that there is some m such that 
{fci, . . . , }-transitivity implies (m + Z • d)-transitivity for all I > 0, and m = 1 mod d. 
Since the sequence {kn)neN is infinite and no element is repeated, there is some n > uq such 
that kn > TO. Since gcd(fci — 1, . . - , kng — I, . . . , kn — I) = dn = d, we know that d divides 
kn — 1. Therefore, let fc„ = • p + 1. Since to = 1 mod d, let m = d ■ q -\- 1. Since fc„ > to, 
we know that p> q. Hence it follows that 

kn = d- p-\-l = d{p-q-\-q)-\-l = d- {p-q)-\-d-q-\-l = d-{p-q)-\-m. 

Due to the choice of to and since p — q > 0, we therefore know that {ko, . . . , fc„p}- 
transitivity implies fc„-transitivity. This is a contradiction to Proposition 4.19, since kn is 
added after ko, . . . , kna- Therefore, there are only finitely many elements of the form trans'' 
added by the algorithm. □ 

Since we have now restricted the number of elements trans'^ added to types-list, we can 
prove that the algorithm halts on any input. 

Lemma 4.25. Horn-Classification always halts. 

Proof. Assume that it does not halt for an instance "ip. Due to Lemma 4.24, we know that 
tlierc are only finitely many elements of the form trans'' which are added to types-list by 
Horn-Classification. Since the only other elements which can be added to types-list are 
ref 1 and symm, this implies that there are only finitely many elements of any type which 
are added to types-list. Now let types-list be as determined by the algorithm. Since the size 
of types-list is bounded and the variable never shrinks, this is well-defined. 

Since the algorithm does not halt, we know that there is a clause in tp which is not 
satisfied in every types-list-tree, and if does not satisfy any of the 4 NP-conditions. 

Thus there is some (a, T) e types-list — T^°™ such that (p is not satisfied in T. Since we 
already showed that Horn-Classification is well-defined, and none of the NP-cases applies 
(otherwise the algorithm would come to a halt) , we know that one of the reflexive, transitive, 
or symmetric cases applies. In particular, conc(i^) = {x,y), and x = y ov x,y G prereq((^) 
and {a{x),a{y)) is not an edge in T. If one of the cases corresponding to an element not 
in types-list applies, then this leads to an enlargement of types-list, a contradiction to the 
choice of types-list. Hence one of the cases corresponding to one of the elements already in 
types-list applies. We make a case distinction: 

Case 1: the reflexive case applies. In the case that x = y, the clause is trivially satisfled 
in the reflexive graph T. Assume that x ^ y. In this case, a{x) = a{y). But since 
refl G types-list, and {a,T) S types-list — T^°™, we know that T is a reflexive tree. 
Hence, the edge {a{x),a{y)) exists in T, a contradiction. 



On the Complexity of Elementary Modal Logics 



35 



Case 2: the transitive case applies for some k. In this case, there is a path of length 
k from a{x) to a{y) in T. But since trans*^ G types-list, and (a, T) e types-list — 
Tj^°™, we know that T is a fc-transitive tree. Hence, the edge {a{x),a{y)) exists in T, a 

contradiction. 

Case 3: the symmetric case apphes. In this case, there is an edge from a{y) to a{x) 
in T. But since symm e types-list, and (a, T) G types-list — we know that T is a 

symmetric tree. Hence, the edge {a{x),a{y)) exists in T, a contradiction. 

Since we have a contradiction in each case, this completes the proof □ 

Now that we know that the algorithm is both well-defined and comes to a halt, it remains 
to prove its correctness. The case in which the algorithm states PSPACE-hardness is easily 

seen to be correct: 

Lemma 4.26. If for a universal Horn formula 'ij), HORN- Classification states that K(V')- 
SAT is PSPACE-Ziarrf, then this is true. 

Proof. The only possibility for the algorithm to state that the problem is PSPACE-hard is 
when the WHILE-loop does not discover any clauses (p anymore which are not satisfied in 
every types-list-tiee, and types-list does not contain both symm and trans'^ for any k G N. 
Since each clause in i/; is satisfied in every types-list-tree, this implies that the conjunction 
Ip is also satisfied in each types-list-tvee. Hence one of the following cases occurs: 

— is satisfied in every strict tree (if types-list = 0), 

— ^ is satisfied in every reflexive tree (if types-list = {ref 1}), 

— there is a set 5 C N such that tp is satisfied in every ^-transitive tree (if types-list = 
{trans'^ | k G S}), 

— ip is satisfied in every symmetric tree (if types-list = {syimii}), 

— Ip is satisfied in every tree which is both refiexive and symmetric (if types-list = 
{ref 1, symm}), 

— there is a set S C N such that tp is satisfied in every tree which is both reflexive and 
5-transitive (if types-list = {ref 1, trans'^ | k G 5}). 

In each of these cases, the hardness result follows directly from Theorem 2.8. □ 

We arc now interested in the NP-cascs. Wc first show that if Horn- Classification 
adds one of the requirements sjrami, ref 1, or trans'^ for some k to the list types-list, then the 
formula tp requires any graph G satisfying ■ip to have the corresponding property (except for 
vertices with insufficient depth or height in the graph) . More precisely, we show the following 
Lemma: 

Lemma 4.27. Let ip be a universal Horn formula, and let type G 
{ref 1, symm, trans'" I A: e N} be added to types-list by Horn-Classification on in- 
put ip. Then the following holds: 

— If type = symm, then ip implies >flu>^p^x>p^y>p for some p gN, 

— If type = ref 1, then ip implies <P°>p,x>p,j,>p fo'^ «ome p e N, 

— // type = trans'^, then V' implies V'^p,x>p,y>p /^'^ some pGN. 

Proof. Inductively assume that all values added before type (if any) were "correct" in the 
sense that they satisfy the conditions of the lemma. Let the content of the variable types-list 
directly before adding type be denoted with prev-types-list. Let (p be the clause in ip for 
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which type was added. Then, by the construction of the algorithm, we know that (p satisfies 
the case in the algorithm corresponding to type, it particular, cone {(p) = {x, y) for some 
variables x = y ov x,y G prereq ((^). First assume that x,y G prereq (0) . 

We also know that ip is not satisfied in every prev-types-list-trcc. Hence, let {a,T) G 
prev-types-list — j*om g^^j^ ^Yia,t {a{x),a{y)) is not an edge in T. This must exist due to 
Proposition 4.3. By construction of Horn-Classification, in the case that type = ref 1, 
we have that a{x) = oi{y), and in the case that type = trans*^, we can choose (a, T) in such 
a way that a{y) is is k levels below a{x) in T. Finally, in the case that type = symm, we 
know that there is an edge {a{y),a{x)) in T. Since the reflexive condition does not apply, 
we can choose {a,T) in such a way that a{x) ^ a{y), and since symm ^ prev-types-list, this 
implies that a{x) is in a lower level of T than a{y). 

Since all additions before type were correct, we know that all the types in prev-types-list 
have been added correctly, i.e., we can assume that there is some p such that 

— If symm e prev-types-list, then -tjj implies V'l,^p^x>p,y>p some p gN, 

— If ref 1 e prev-types-list, then ijj impHes '^"">p,a>p.j/>p f*^^^ some p G N, 

— If trans*^ G prev-types-list, then ijj implies 'f^p^x>p,y>p ^'^^ some p gN. 

We can use the same value p for all formulas here by taking the maximum, since clearly, 

'f'w~>p,x>q,y>r implies 0t~>p' ,x>q' ,v>r' if P' >P,<l'> <1: and r' > r. Now let L = {xq, . . . , x„) 
be the homomorphic image of T under the homomorphism 5 as a prev-types-list-line, where 
S assigns each v G T the node Xi, with i being the level of v in T. Let a(x) be in the ath 
level of T, and let a{y) be in the n — 6th level of T (where n is the height of T). Due to the 
construction of S, we know that S{a{x)) = Xa, and 5{a{y)) = Xn-b- First note that: 

— If type = refl, then a{x) = a{y), and hence S{a{x)) = S{a{y)). It follows that n = a+6. 

— If type = trans'^, then by choice of T, a{y) is exactly k levels below x in T, and therefore 
we know that a + & + fc = n. 

— If type = symm, then, since symm ^ prev-types-list, we know that in L, we only have 
edges between non-decreasing nodes. Since the symmetric case applies, we know that 
{a{y),a{x)) is an edge in T. Since a{x) ^ ct{y), a{x) is at a lower level than a{y) in T, 
and it follows that a > n — b. If a>n — 6 + 2, then it follows that the line L satisfles 
NP-condition 3, a contradiction. Therefore we know that o = n — 6 + 1. 

We now show that 

^ implies (^°1°+fc+p_^>„+j,+p ,^>„+6+p if type = refl, 
i implies ^°^^+fc+p_^>„+b+p,j/>a+6+p+fe if ^VP^ = traIls^ 
V' implies <^^-5°+6+p_^>„+b+p+i,y>a+6+p if ^VP^ = syn™- 

For this, let G be a graph such that G |= ^z;, by induction we know that the nodes 
of G which have both a p-step predecessor and a p-step successor satisfy the conditions of 
prev-types-list. To prove the claim, let u, v be elements of G which have both an a+6+p-step 
predecessor and an a + 6 + p-step successor, and 

u = V if type = refl, 

There is a fc-step path in G from u to v if type = trans'^, 
There is an edge {v, u) in G if type — symm. 

In order to prove the lemma, we need to prove that (u, v) is an edge in G. Since G \= 4^, 
and (f is a clause in tp, it suffices to prove that there is a homomorphism 7: prereq (cp) G 
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such that 7(2;) = u and 7(2/) = v. Then there is an edge {u, v) in G due to Proposition 4.3. 
Since S o a: prereq(<^) ^ L is a homomorphism and 6 o a(x) = Xa and 6 o a{y) = Xn-bi 
it suffices to show that there is a homomorphism 0: L ^ G such that (3{xa) = u and 
f3{xn-b) = V. Then the homomorphism j := (3 o S o a satisfies the necessary conditions. Let 
w be an a-step predecessor of m in G such that w has a p-step predecessor in G, and let t 
be a 6-step successor of ?; in G which has a p-step successor in G. Both must exist due to 
the choice of u,v. Additionally, if types ~ symm and therefore (f,u) is an edge in G, choose 
w to be an a — 1-step predecessor of v (in which case it is also a a-step predecessor of u) , 
and in this case also let t to be a 6 — 1-step successor of u (in which case it is also a 6-step 
successor of v). 

Now, define j/o w, and let yi,..-,yn from G be chosen in such a way that ya = 
u,yn-b = V, and y„ = t, and for all relevant i, (t/i,yi+i) is an edge in G. This is possible 
since u and v satisfy the conditions corresponding to type : 

— If type = ref 1, we know that n — b = a, and u, = v. Hence the nodes yi can be chosen 
satisfying the demanded conditions by choosing j/qi ■ • ■ j I/a to be the nodes on the a-step- 
path from w to u = v, and yn-b, ■ ■ ■ ,yn to be the nodes on the 6-step path from u — v 
to t. 

— If type = trans'^, we know that n = a + h + k, and we can choose yo,---,ya to be the 
nodes on the path from w to u, ya, ■■■ , yn-b to denote the fc-step path from u to u (which 
exists due to the choice of u and v), and yn-b, ■■ - iVn be the nodes on the 6-step path 

from V to t. 

— If type = symm, then by the above we know that a = n — 6 -I- 1 , and we know that there 
is an edge (u, u) in G. We also know that in this case, w is an a — 1-step predecessor 
of V. Hence we can choose the nodes in the following way: Let yo,. . . , ya-i = yn-b be 
chosen as the nodes on the a — 1-step path from w to v, and let yn-b+i = J/a, ■ • ■ , J/n be 
the nodes on the 6 — 1-step path from u to t. Since {v, u) is an edge in G, this gives the 
edge {yn-b, Va) which is required since n — 6 -|- 1 = a. 

We now construct the homomorphism /3 : for each relevant «, let j3{xi) := yi. Then by con- 
struction, (3{xa) = u and (3{xn-b) = v. Hence it remains to prove that /3 is a homomorphism. 
Since L is a prev-types-list-line, let ^strict be a strict line such that L is the prev-types-list- 
closure of ^strict- Since (y^, j/i+i) is an edge in G for all relevant i, it follows that f3: L G 
is a homomorphism. Since every yi has a p-step successor and a p-step predecessor in G, we 
know that the subgraph {yo, . . . , yn} satisfies the conditions from prev-types-list, and since 
L is the prev-list-types-closiiTC of igtrict, this implies that for every edge present in L, the 
images of the corresponding vertices are also connected with an edge in G, and hence /3 is 
indeed a homomorphism, finishing the proof of the lemma for the case that x,y G prereq (tp) . 

Now assume that x ^ prereq (if) or y ^ prereq (ip) , and therefore x = y. Since there 
obviously is a homomorphism a: prereq (<^) T for some prev-types-list-tree T, the clause 
(f forces every node in a graph containing a types-list-line of sufficient length to be reflexive. 
Since due to the induction hypothesis, we know that every model of ip of sufficient depth 
contains arbitrary long prev-types-list-lmes, this concludes the proof for the remaining case 
X = y. □ 

Due to Lemma 4.27, we know that the list types-list maintained by 
Horn-Classification is sensible, and we are now in a position to prove that the 
NP-cases claimed by the algorithm are correct as well. 

Lemma 4.28. Let ip he a universal Horn formula. If Horn-Classification states that 
K('!/)) has the polynomial- size model property and K(-!/))-SAT is in NP, then this is true. 
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Proof. There are two possibilities for the algorithm to claim the polynomial-size model 
property, and hence NP-membership. First let us assume that for some k > 2, both symm 
and trans'^ were added to types-list. In this case, due to Lemma 4.27, we know that there is 

some p gN such that i/j implies both 9?"^^ ^>p j,>p and ifl^p j.>p y>p. Hence Theorem 4.15 

implies both the polynomial-size model property of the logic and the NP-membership 
of its satisfiability problem. 

The second case in which Horn- Classification claims the NP-result is if it detects a 

clause (f which satisfies one of the conditions 1—4. We know by Lemma 4.27, that for each 
element from types-list, the formula tp implies a formula of the corresponding type. Hence 
we can assume that there is a natural number p, such that the set of vertices in G which 
have both a p-step predecessor and a p-step successor satisfy the conditions from types-list. 
We make a case distinction. 

ip satisfies NP-condition 1. In this case, we know that conc((^) = {x,y) for some 
X y G prereq {(f) , and that there is a pair (a, T) G types-list — T^°™ such that there is no 
directed path connecting a{x) and a{y) in T. Note that we can assume symm ^ types-list, 
since otherwise every pair of vertices in T would be connected with a directed path. First 
assume that it is possible to choose T and a in such a way that a{x) ^ oi{y). In this case, 
since T is a tree, we know that a{x) and a{y) have a common predecessor w in T. Let w be 
a common predecessor which is "minimal," i.e., no node in a lower level than w is a common 
predecessor. 

We construct a types-list— tvee T' as a homomorphic image of T via the homomorphism 
(3 as follows: Let n be the height of the tree T, and let xq, . . . , a;„ be a types-lislAme such 
that every element in T is mapped on its corresponding level in L, except the nodes on 
the path from w to a{x) (excluding w) and the successors of a{x). Let s be the level of w 
in T, i.e., let a{uj) = Xg- Let w -\- k and w -\- I he the levels of a{x) and a{y) in T, since 
there is no directed path connecting a(x) and a{y), it follows that k,l > 0. Now introduce 
nodes ys+i, ■ ■ ■ such that {xs,ys+i) is an edge, and {yi,yi+i) is an edge for every relevant 
i, and map the path from w to a{x) and the successors to a{x) to the "branch" ys+i, ■ ■ ■ 
(add as many of these nodes as the "branch" of T requires). Now close the construction 
under the types-list-condition, and call the tree obtained in this way T' . Since T' is the 
"canonical homomorphic image" of T, it is again a types-list-tree, and in T', there is a path 
of length k from j3{w) to (3{a{x)) and a path of length I from j3{w) to /3{a{y)). Let if' be 
the clause with prerequisite graph T' and conclusion edge {f3{a{x)), P{a{y))). Since /?oa is 
a homomorphism, we know from Proposition 4.4 that (p implies (p' . 

Intuitively, (f' is the types-list-closurc of a clause of the form <^^^5j y>nt with q chosen 
according to the height of the tree T and the length of the branch containing a{x) (without 
loss of generality, we assume that the branch containing a{x) does not contain the deepest 

nock; in the tree). We now show that i/) => V'^">i+p,x>9+p,3/>n+p' complexity result 
then follows from Corollary 4.14. 

Hence, let G be a graph such that G \= tjj, and let u and v be vertices in G such that 
u and V have a predecessor w', and w' has a. s -\- p-step predecessor, u has a, q -\- p — k- 
step successor, and v has an n -\- p ~ l-step successor, and there is a fc-step path from w' 
to u, and an ^-step path from w' to v. Then, since these vertices satisfy the conditions of 
types-list by Lemma 4.27, we can homomorphic ally map the prerequisite graph of T' into 
G via the homomorphism 7 such that j{f3{w)) = w' , 7(/3(a(x))) = u, and 'y{P{a{x))) = v. 
The edges required in order for 7 to be a homomorphism exist because of the paths of the 
corresponding lengths connecting w, u, and v, and because all of the relevant nodes in G 
satisfy the types-list-conditions. Hence, by Proposition 4.3, we know that {u, v) is an edge 
in G, as required to show. 
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Therefore, assume that it is not possible to choose (a, T) in such a way that a{x) ^ a{y), 
i.e., assume that in every {a,T) G types- list — T^°™, a(x) and a{y) are connected with a 
directed path or are identical. Since satisfies the first NP-condition, we know that there is 
a pair {a, T) e types-list-T^°'^ such that there is no directed path connecting a{x) and a{y) 
in T, and hence a{x) = a{y), and this node is irreflexive in T. In particular, we know that 
ref 1 is not an element of types-list. We also know that symm ^ types-list, since otherwise, 
every node in the connected graph T would be connected to any other with a directed path 
(T obviously is not the irreflexive singleton, since a(x) ^ ct{y))- Now define /3 to be T's 
canonical homomorphic mapping to a types-lislAme L = {xq, . . . ,Xn), it then follows that 
(3{a{x)) — P(a{y)) — x,i for some i. Since x and y are different nodes in prereq((^) , we can 
modify this line as follows: We introduce a new node j/j which is a "neighbor" to 
node which is connected to all predecessors and all successors of Xj. 

Call this line L' . Note that since types-list only contains variations of transitivity, there is 
no condition requiring that x, is a reflexive node. Since we connected yi to all successors and 
predecessors of x,, the line L' still satisfies all conditions from types-list, and Xi and yi are 
not connected with an edge in L' . We now construct a homomorphism 7: prereq((^) L' , 
by defining '){z) = (i{a{z)) for all z ^ y, and ^{y) = yi. Since the involved nodes are 
irreflexive and /3 o a is a homomorphism, and yi has all edges that Xi has, we know that 
7 is a homomorphism. Let (p' be the universal Horn clause with prerequisite graph L' , and 
conclusion edge (xi, yi). The homomorphism 7 and Proposition 4.4 show that ip implies ip' . 

Note that the clause (p' requires the following: For every pair of nodes (x', y') in a graph 
G satisfying the conditions of types-list which have a common predecessor w' and a common 
successor z' with sufficient height and depth, there is an edge connecting x' and y' . Since 
by Lemma 4.27, every graph satisfying f/; also satisfies the requirements from types-list for 
nodes with sufficient depth and height, we can apply if>' to nodes of sufficient depth and 
height in every such graph. 

Let G be a graph satisfying ij), and 
let C be the set of nodes in G which 
have sufficient height and depth to 
be able to apply the conditions of ip' . 
We show that C is reflexive, transi- 
tive, and symmetric. Note that since 
G satisfies ■0, and 1^ is a clause in ip 
implying dp' , we know that G satisfies 
(p' as well. 

We first show that C is refiexive. 
Let V be a node in C. Since v satisfies 
the conditions of both Xj and yi in 
the line L' , and since L' = prereq {ip)' 
and G satisfies (p' , we know that there 
is an edge {v, v) in G, and hence v is 
refiexive. 

For symmetry, let there be nodes 
v\,V2 S C such that {vi,V2) is an 
edge in G. By the above, we know 
that both of these nodes are refiexive, and in particular have unbounded height and depth 
in G. Therefore, we can map the predecessor graph of (^', i.e., the line L' to these nodes 
in such a way that for j < i, Xi \s mapped to vi, yi is mapped to vi, and all Xj for j > i 
are mapped to V2. Since in L' , all edges go from variables with lower indexes to variables 




Fig. 9. The homomorphism for the proof that C is 
symmetric 
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with higher indexes, in this way we have constructed a honioniorphism from prereq (i^') to 
C, such that the conclusion edge {xi,yi) of (f' is mapped to the pair {v2,Vi). Hence, by 
Proposition 4.3, and since G satisfies (p', we know that there must be an edge {v2, vi) in C, 
as required. 

Finally, we show that C is transi- 
tive. For this, assume that (s,i) and 
{t, u) are edges in C. Since we already 
proved symmetry for C, we know that 
in this case, (t, s) and (u, t) are also 
edges. We can again construct a ho- 
momorphism mapping all elements of 
L' to t, except mapping Xi to s and 
to u. Since the nodes s,t, and u are 
reflexive in C by the above, and there 
is no edge (xi, yi) or (y^, Xi)m L, this 
is a homomorphism. Since G satisfies 
(fi', Proposition 4.3 shows that {s,u) 
is an edge in G, as claimed. 

In particular, since C is reflexive, 

symmetric, and transitive, this means 
that C 1= ip^^^. Since G is deflned as 
the nodes which have some sufiicient 
depth and height p in the graph, and G \= (p^^^ 




Fig. 10. The homomorphism for the proof that G is 
transitive 



it follows that G \= >f> 



1^1 

w>p,x>p.y>p 



for some 



p, and hence V =^ 'fl^l,x>p,v>p- Therefore, K(^) is a logic extending K(^^-^i^>p^>p), 
and therefore the complexity result as well as the polynomial-size model property follow 
from Corollary 4.14. 

(f satisfies NP-condition 2. By the prerequisites, since ip is not satisfied on every 
types-lislr-tvee, we can homomorphically map prereq (i^) onto a types-list-line. First assume 
that cone {(p) is empty. Then any graph G satisfying the conditions of types-list which has 
a line of more than this length does not satisfy the clause (p. Since every graph satisfying 
tp also satisfies ip and the conditions of types-list for nodes of sufiicient depth and height, 
every graph satisfying -i/) of sufiicient depth and height does not satisfy (p>, and hence not 
This implies that graphs satisfying tjj can only be of depth limited by a constant, and hence 
Lemma 3.8 immediately implies the polynomial-size model property. 

Therefore assume that conc((^) = ix,y) for variables x,y, and assume that x,y are not 
connected with an undirected path in prereq {(p). Since x and y lie in different connected com- 
ponents of the underlying directed graph consisting of prereq (i^) U cone (tp) , and prereq (<^) 
can be homomorphically mapped into a types-list-line, the "left side" of the implication (p> is 
satisfied by any pair of vertices (w, v) in a graph satisfying the types-list-conditions of sufii- 
cient depth and height. Therefore, the subgraph G containing all nodes with sufiicient height 
and depth forms a universal subgraph, and the NP-result follows by the same reasoning as 
in Case 1. 

(p satisfies NP-condition 3. In this case, it follows by the same reasoning as in 
Lemma 4.27 that any graph satisfying ijj also needs to satisfy the formula 0^p^x>p,y>p 
for some p and some k>2. Hence the complexity result follows from Corollary 4.14. 

(p satisfies NP-condition 4. Again, with the proof of Lemma 4.27 it can easily be seen 

that imphes formulas 'p]~iZ x>v.v>v V''i^i.x>n.v>v ^'^^ k > 2 and some natural 



number p. Therefore the NP-result follows from Theorem 4.15. 



□ 
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The preceding Lemmas have estabhshed that Horn-Classification is well-defined, 
always comes to a halt, and in each case produces the correct result. Hence, we have proven 
Theorem 4.17. This theorem and its proof now yield an interesting Corollary: 

Corollciry 4.29. Let •ip be a universal Horn formula. If one of the following cases applies: 

— -(jj is satisfied in every strict tree, 

— tp is satisfied in every reflexive tree, 

— tjj is satisfied in every S-transitive tree for some 5 C N, 

— t/j is satisfied in every symmetric tree, 

— ip is satisfied in every symmetric and reflexive tree, 

— ip is satisfied in every S-transitive and reflexive tree for some S* C N, 

then K('0)-SAT is PSPACE-Ziard and K(f/;) does not have the polynomial- size model property. 
In all other cases, K(i/)) has the polynomial- size model property and K(i/))-SAT e NP. 

Proof. We know by Theorem 4.17 that Horn-Classification correctly determines the 
complexity of the problem K(?/')-SAT. By the algorithm, it is obvious that the only arising 
cases are PSPACE-hard and NP. From the proof of Lemma 4.26, we know that the PSPACE- 
cases all satisfy the statement of the corollary, and Theorem 2.8 shows that in these cases, 
we always have PSPACE-hardness. 

Finally note that all of our NP-proofs also give the polynomial-size model property, and 
all PSPACE-hardness proofs also show that this property does not apply. □ 

4.6 Tree- like models for Horn logics 

In Section 4.5, we have shown that logics defined by universal Horn formulas have a sat- 
isfiability problem which is solvable in NP, or is PSPACE-hard. We now show a tree-like 
model property for these logics, which we will put to use in the next section by concluding 
PSPACE-membership for a broad class of these logics. Recall that Corollary 2.6 stated the 
tree-like model property for the modal logic K : Every K-satisfiable formula has a tree-like 
model which also is a K-model (which is easy, since every model is a K-model). What we 
want to show is that a logic K(V;), where is a universal Horn formula satisfied on ev- 
ery reflexive/symmetric/S'-transitive tree, has the following property: Every modal formula 
which has a K(^/')-model also has a K('i/;)-model which is "nearly" the reflexive/symmetric/5- 
transitive closure of a strict tree. In order to prove this result, we first recall from the liter- 
ature the concept of a bounded morphism, which allows us to prove modal equivalence of 
models. 

Definition 4.30 ([BdRVOl]). Let T and M be modal models, and let f:T^Mbea 
function. Then f is a bounded morphism if the following holds: 

(i) For all w gT, w and f{w) satisfy the same propositional variables, 

(ii) f is a homomorphism, 

(Hi) if {f{u),v') is an edge in M, then there is some v € T such that {u,v) is an edge in T 
and f{v) = v'. 

The most important feature of bounded morphisms is that they leave the modal prop- 
erties of the involved models invariant: 

Proposition 4.31 (Proposition 2.14 from [BdRVOl]). Let T and M be modal models, 
and let f : T ^ M be a bounded morphism. Then for each modal formula (p and for each 
w € T, it holds that T,w \= (p if and only if M, f{w) \= (p. 
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With bounded morphisms, wc can now prove that our logics have "tree-like" models. We 
first recall a standard result from the literature about the logic K: 

Proposition 4.32 (Proposition 2.15 from [BdRVOl]). Let M,w |= cp such that M 
is rooted at w. Then there exists a tree-like model T and a surjective bounded morphism 
f:T^M. 

We now generalize this result to universal Horn logics, and "tree-like" models. We already 
know from Corollary 4.29 that for each universal Horn formula iIj for which the logic K('^) 
has a satisfiability problem which cannot be solved in NP, the formula is satisfied on every 
tree which additionally is closed under reflexivity, 5-transitivity and/or symmetry. We now 
show that a version of the "converse" is also true: Not only are all of these trees models 
for the corresponding logics, but for every modal formula satisfiable in such a logic, we can 
find a model which is "almost" such a tree. The reason for the "almost" is that our Horn 
formulas usually will not imply a property like S'-transitivity, but only S'-transitivity for 
nodes at a certain depth in the graph, as shown in Lemma 4.27. We will see in Sections 4.7 
and 4.8, that the characterization of the involved models can be used to obtain PSPACE 
upper bounds for a wide class of logics. 

Theorem 4.33. 1. Let ^ be a universal Horn formula such that Horn-Classification 

returns PSPACE-Ziard on input ip. Let types-list be as determined by 
Horn-Classification on input t/j. Since the algorithm determines the logic to 
be PSPACE-hard, this is well-defined. Then for every modal formula (p which is 
K{ip)-satisfiable, there exists a K(ip)-model T and a world w € T such that T,w \= (p 
and there is a strict tree Tgtrict such that T and Tgtrict have the same set of vertices, and 

edges (Tstrict) C edges (T) C edges {types-list{Tstiict)) , 

where types-list^Tstmct) denotes the types-list-closure o/Tstrict- 
2. Let ip be a universal Horn formula such that ip is satisfied on every strict line. Then 
for every modal formula (p which is K{'ip)-satisfiable, there exists a K{tp)-model T and a 
world w gT such that T,w \= (p, and T is w-canonical. 

Proof. We prove both claims with nearly the same construction, indicating when differences 
are required. Since <p is K(t/')-satisfiable, there is a K(^)-model M and a world w & M such 
that M,w\= (p. 

For the first claim, let types-listhe as determined by Horn-Classification when started 
on input ip. Since the algorithm does not return NP, we know that types-list C {ref 1, symm} 
or types-list C {ref 1, trans'^ | k G N}. Since the second NP-condition does not apply, we 
know that for any clause in tp such that there is a homomorphism a: prereq(y') — > T 
for some types-list-ime T, that cone {ip) = {x, y) for some variables x, y with x = y ov 
X, y e prereq {cp) . 

For the second claim, we show that for every clause in V', if is not satisfied in every 
t/;-canonical graph, then cone {(p) ^ 0. Obviously, the prerequisite graph of such a clause ip 
can be mapped into some w-canonical graph, and therefore also into its image L as a strict 
line. Since ip is satisfied on every strict line, so is ip, and hence cone {(p) ^ 0, since otherwise, 
the clause would be unsatisfied on L, a contradiction. 

For both claims, due to Proposition 3.7, we can assume that M is rooted at w. From 
Proposition 4.32, we know that there is a model Tq which is a strict tree, and a surjective 
bounded morphism /: Tq ^ M. Let Tgtrict '■= Tq. Let Wt denote the root of Tq. The strict 
tree Tq is trivially WT-canonical. 
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Wc define a sequence of models {Tn)^^^ such that for each n e N, it holds that when we 
are proving the first claim: 

1. vertices (T„) = vertices (To) , 

2. edges (Tstrict) ^ edges (r„) C edges {types-list{Tstiict)) , 

3. /: T„ — > M is a homomorphism. 

In the case of the second claim, we exchange the second point with "T„ is WT-canonical." 

Note that due to Corollary 3.9, we can assume that the model M is countable. The proof 
of Proposition 4.32 from [BdRVOl] then constructs a model Tq which is also countable. 
Hence assume that Tq is a countable model. Now let (e„)„gN be a surjective enumeration of 
vertices (To) x vertices (To) . i.e., of all possible edges in the involved trees. The construction 
of our model is as follows: For n = 0, the model Tq from above obviously satisfies the 
conditions, since every bounded morphism is also a homomorphism. For n > 0, we make a 
case distinction: 

— If every clause in is satisfied in T„, then let T„+i := T„. 

— Otherwise, let (fin+i be a clause from ip which is not satisfied in T,i such that 
conc(<^„+i) = (a;„+i,y„+i) for variables a;„+i,y„+i, and let a„+i : prereq (<^„+i) U 
{xn+i,yn+i} ^ T„ be a homomorphism such that (a„+i(a;„+i), a„+i(y„+i)) is not an 
edge in T„. This must exist by Proposition 4.3, since by the above, the case cone (ipn+i) = 
cannot occur. Choose a„+i in such a way that the pair (a„_|_i(a;„+i), a„+i(?/„+i)) 
has a minimal index in the sequence (e„). Now let T„+i be defined with vertex set 
vertices (T„) , edge set edges (T„) U {(a„+i(a;„+i), an+i{yn+i))} , and the same preposi- 
tional assignments as T„. 

We show that the construction satisfies the requirements 1-3. The first point, which is 
the same for both claims, holds by definition. 

For the first claim, we prove that for each n, it holds that edges (Tgtrict) C edges (T„) C 
edges {types-list{Tgtyict)) ■ Since by definition, edges (T„) C edges (T„+i), we know that for 
all n, it holds that edges (Tgtrict) = edges (Tq) C edges (T„), and we also know that 
edges (Tstrict) = edges (Tq) C edges {types-list{Tstrict)) ■ 

Hence assume that there is some minimal n such that edges (T„) ^ 
edges {types-list(Tstiict)) ■ Due to the minimality of n, and since the claim holds for 
n = 0, we know that the edge which is not present in edges {types-list{TstTict)) is the edge 
(q!„(.t„), Q!„(y„)). By definition, a„: prereq((^„) U {a:„,y„} T„_i is a homomorphism. 
Since due to minimality of n, we know that edges (T„_i) C edges {types-list{Tg^^[ct)) ) this 
implies that a„: prereq(<^„) U {a;„,y„} — > types-list{TstTict) is a homomorphism as well. 
Since is a clause in ijj, and f?/pes-Zisf(Tstrict) |= ''P^ we know that types-list(Tstrict) \= 'Pi and 
with Proposition 4.3, we conclude that {an{xn) , ctniVn)) is an edge in types-listiTs^trict) , a 
contradiction. Therefore we know that edges (Tgtrict) C edges (T„) C edges {types-list{Tstrict)) 
for all n, and hence we have proven the second point in the case of the first claim. 

For the second claim, we need to show that T„ is a wjx-canonical graph. For i e N, let 

Li denote the nodes in the i-th level of T„_i, i.e., the set |w e T„_i | T„_i \= wt w|- 
In order to prove that T„ is WT-canonical, since r„_i is, it suffices to prove that the edge 

{an{xn), CKniy-n)) in the Step from T„_i to T„ does not destroy the property of being canon- 
ical, i.e., we need to show that Q!„(x„) S and a„(2/„) € Ti+i for some i. Let L be 
the homomorphical image of T„_i as a strict line via the homomorphism /3 (since r„_i is 
w-canonical, this exists and is unique). Since «„: prereq((^„) U {a;„,y„} T„_i is a homo- 
morphism, we know that f3 o a„: prereq((p„) U {xn,yn} ^ T is a homomorphism as well. 
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Since is satisfied on every strict line, this is also true for (p, and hence due to Proposi- 
tion 4.3, we know that (/3 o a„(a;„), /3 o a„(2/„)) is an edge in L. Therefore, an{xn) is exactly 
one level above a„(y„) in T„_i, as required. 

For both claims, we now show that /: T„ ^ M is a homoniorphism for all n. Again, we 
prove the fact by induction, and for n = 0, this holds due to the choice of Tq, since every 
bounded morphism is a homomorphism. Therefore, let the claim hold for n, and let {u, v) be 
an edge in T„_|_i. If (u, v) is not the edge (a„+i(x„4.i), then we know that (u, v) 

is an edge in T„ as well, and since due to induction hypothesis, we know that f:T„^M 
is a homomorphism, it follows that {f{u),f{v)) is an edge in M. Therefore assume that 
u = Q!„+i(a;„+i) and v = a„+i(y„+i). We need to show that (/oQ!„+i(a:;„+i), /oQ!„+i(y„+i)) 
is an edge in M. By construction, we know that an+i- prereq (i^„+i) U {Xn+i,yn+i} Tn 
is a homomorphism. Since by induction hypothesis, we know that /: T„ ^ M is a homo- 
morphism, it follows that / o a^+i : prereq {(p.„^i) U {.'/'„+i, j/n+i} ^ M is a homomorphism 
as well. Since M is a K(i/')-model and (^n+i is a clause in ■</-'. we know that M satisfies i^n+i, 
and thus by Proposition 4.3, we know that (/ o an+i{xn+i) , f ° Q.n+i{yn+i)) is an edge in 
M, as required. 

We now construct the desired K(i/')-model as follows: Define Too as having vertices (Too) = 
vertices (To) and edges (Too) = U„eNedges (T„). We show that Too is a K('!/j)-model, and that 
/ : Too — > M is a bounded morphism. 

Assume that is not a K('0)-model. By construction, wc know that in this case, 
there is no n such that T„ = T„_|_i, and therefore each T„+i has exactly one additional 
edge in comparison to T„. Hence we can define a sequence {fn)neN such that /„ = i e N iff 
edges (T„+i) = edges (T„)U{ei}. Then /„ is a sequence of pairwise different natural numbers. 
Since ip is not satisfied in T'oQ , there is a clause (p from ip which, is not satisfied, in T'qq . For 
both claims, we therefore know by the above that cone {(p) = {x, y) for variables x, y with 
X = y OT x,y G prereq (i^). By Proposition 4.3, we know that there is a homomorphism 
a: prereq (ip) U {x, y} ^ M such that {a{x),a{y)) is not an edge in Too. Let J € N such that 
{a{x),a{y)) — Cj. Since in the sequence /„, no number is repeated, there is some natural 
number no such that /„ > j for all n > Uq. Since prereq (ip) is a finite graph, and edges (T„) C 
edges (T„+i) , and edges (Too) = U„£Nedges (T„) , we know that there is some ni G N such 
that a: prereq ((^) U {x.y} T„j is a homomorphism. Then a: prereq ((^) U {x,y} Tn is 
also a homomorphism for all n > ni , since every edge present in T„j^ is also present in every 
T„ for n > Til. Let n := max(no,ni). Then in the step from T„ to T„_|_i, the edge e/^ was 
added, and by choice of n we know that /„ > j. Since ej is not an edge in Too, we know that 
Cj is also not an edge in T„. Recall that an+i, 0n+i are chosen in such a way that the edge 
(q„+i(.t), Q:„+i(y)) has minimal index in the sequence (e„)„eN, this is a contradiction, since 
the edge Cj is an edge with a smaller index than e/^ , and since a: prereq (i^)U{a;, y} ^ T„ is a 
homomorphism, ej satisfies the conditions of the edge (a„+i(a;), q:„+i(?/)) in the construction 
of T„+i. 

It remains to show that /: Too ^ M is a bounded morphism. Property (i) holds by 
construction, since we do not change prepositional assignments, and / : Tq — > M is a bounded 
morphism. We now show that / is a homomorphism. Hence let (u, v) be an edge in Txj- Since 
Too is the union over all T„, there is some n G N such that (u, v) is an edge in T„. Since by 
the above, /: T„ — > M is a homomorphism, it follows that {f{u),f{v)) is an edge in M, as 
claimed. For property (Hi), let u € Too and v' in M such that {f{u),v') is an edge in M. 
Since /: Tq ^ M is a bounded morphism, we know that there is some v G To such that (u, v) 
is an edge in Tq, and f{v) = v'. By construction, {u, v) is also an edge in Too, and therefore 
/: Too ^ M is a bounded morphism. By choice of /, and since vertices (To) = vertices (Too) , 
/ is also surjective. Hence there is some w' G Too such that f{w') = w. Since M, w \= (j), 
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it follows from Proposition 4.31 that Too,w' H By construction, for the first claim it 
holds that edges (Tgtrict) C edges (Too) C edges (<ypes-fc<(Tstrict))i since this holds for the 
individual T„ and Too is the union over the edges of all T„, and for the second claim, Too 
is obviously u'T-canonical: Assume that it is not, then there is a node x E Tea and natural 
numbers i ^ j such that Too H wt — x and Too H ^- Since only a finite 

number of edges is relevant for this path, there exists some n such that T„ \= wt x and 

T„ \= Wt X. This is a contradiction, since T„ is WT-canonical. 

Note that we can assume that the node w' is the root of Too, since due to Proposition 3.7, 
we can assume that every node in Too can be reached from w'. □ 

4.7 PSPACE upper complexity bounds 

In the previous section, we showed that for logics defined by universal Horn formulas, sat- 
isfiable formulas are always satisfiable in a tree-like model. Tree-like models are the main 
argument in many proofs showing PSPACE-membership for satisfiability problems in modal 
logic. We now show that these models indeed allow us to construct PSPACE algorithms for 
a wide class of modal logics. 

Note that while the construction in the proof of the following theorem has similarities 
to the constructions by Ladner in [Lad77] or by Halpern and Moses in [HM92], the focus 
of our result is different. Many proofs of previous PSPACE-algorithms also gave proofs of 
a variant of some tree-like model property. Our proof relies on this property (which we 
already proved for our logics in Theorem 4.33), and as a consequence, the verification that 
the algorithm works correctly with respect to the modal aspect of its task is very easy to 
verify. The main work of the proof is to prove that the algorithm handles the first-order part 
of the satisfiability problem correctly, i.e., that the model it constructs is in fact a model 
satisfying the first-order formula ijj defining the logic. Whereas this is easy for standard 
classes of frames (checking refiexivity, symmetry, transitivity etc is straightforward), in the 
general case that we cover here this requires most of the work. 

The main feature of the logics that we use here is that of locality: The proof makes 
extensive use of the fact that in order to verify that the first-order clauses are satisfied it is 
sufficient to consider local parts of the model constructed by the algorithm. This is the main 
reason why we believe that this proof does not easily generalize to cases where a variant of 
transitivity is among the conditions implied by the first-order formula V'- 

Theorem 4.34. Let tjj be a universal Horn formula such that Horn-Classification does 
not add any element of the form trans'^ to types-list on input -tjj- Then K{ip)-SAT e PSPACE. 

Proof Since NP C PSPACE we can assume that K(V))-SAT ^ NP. Let types-list be as 
determined by Horn-Classification on input ip. From the prerequisites, we know that 
types-list C {ref 1, symm}. From Theorem 4.33, we know that for every K(^/')-satisfiable modal 
formula (f), there is a model T of </> such that T is an edge-extension of a strict tree Tgtrict) 
and every edge present in T which is not an edge of Tgtrict is a refiexive or a symmetric edge. 

By the proof of Lemma 3.8, we can assume that in the tree Tgtrict) every node has at 
most |sf ((?!)) I successors. 

The strategy of the PSPACE-algorithm is as follows: We nondeterministically guess the 
model T and verify that it is a model of both <j) and of i^ by performing a depth-first-search. 
It is straightforward to see that in this way, we can verify that the modal formula (j> holds 
in the model. To also check if if; is satisfied requires a bit more effort: Even though we know 
that ip only adds reflexive or symmetric edges in addition to those present in Tstrict) we need 
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to be careful which edges are required and which are not (there may very well be formulas 
which are not satisfiable on a symmetric and reflexive tree, but are K(V')-satisfiable). The 
main reason why we can perform these tests is that the properties that we work with have a 
"local character:" To check if an edge is required between some nodes u and v in T, we need 
to know whether there is a clause in ?/; such that (p can be homomorphically mapped into 
T in such a way that the conclusion edge is mapped to the pair (u, v). Since we are working 
with a tree only extended with reflexive and symmetric edges, we know that a homomorphic 
image of a connected component of some prereq {(f) including u and v contains only vertices 
which are "near" to both u and v. Therefore we can verify that these clauses are satisfied 
by procedures looking only locally at the model T. 

There are two main obstacles to this approach: For once, the clause (p that requires 
{u,v) to be an edge might very well contain more than one connected component except 
that one containing the conclusion edge (we can ignore the case where there is no conclusion 
edge, or the vertices from the conclusion edge are unconnected in prereq {(p) , since if such 
a clause can be applied, i.e., homomorphically mapped to T, then it can also be homomor- 
phically mapped to the types-list-closiiTC of T. and hence to a types-list-tree, in which case 
Horn-Classification reports NP-membership, which is a contradiction to our assumption 
K(i/')-SAT ^ NP). The other obstacle is that although we only need to look at vertices in 
the "neighborhood" of the current vertex to check that it has all the right edges coming in 
and out, we need to ensure that all the vertices that we looked at "locally" are consistent, 
when we revisit a part of the model which is close to a node that we already considered. 

The ways to deal with these obstacles is the following: For the first problem, we simply 
keep a list of connected components of prereq ((^)-graphs, and at the beginning of the al- 
gorithm, guess for each one if it will appear as a homomorphic image in the tree (which of 
c;oursc later we need to verify). For the second problem, we keep more nodes in storage than 
just the ones in the neighborhood of the one we are currently visiting, but only a polynomial 
number. 

Strictly speaking, the algorithm does not operate on a model, but on an "annotated 
model." The annotation of a world is the set of subformulas and negated subformulas of the 
input formula </> which are true at this world, and are required to be true to ensure that the 
formula (j) is true at the root- world. 

By Proposition 3.7, we can assume that the tree T has height of at most md {(f>). For 
a node v in the i-th level of T, let an not (v) denote the set of subformulas and negated 
subformulas of (p which have a modal depth of at most md (^) — i. These are exactly those 
formulas for which we need to know that they hold at v in order to verify that the input 
formula <p holds at the root of T. 

We now describe the decision procedure, which is a nondeterministic PSPACE-algorithm. 
Let S be the cardinality of the largest connected component in any of the graphs prereq {(p) 
for clauses (p ofijj. Note that this number only depends on tp, and therefore can be regarded 
as constant. The algorithm as stated in Figure 11 does not work in polynomial space, since 
it guesses and stores the possibly exponentially-sized model T. We will first show that 
the algorithm as stated is correct and then prove how it can be implemented using only 
polynomial space, by only storing a currently relevant subset of the model T. 

For the description of the algorithm, we will call a node v € T back- symmetric if there 
is an edge {v, u), where u is the predecessor of v in Tgtrict- 

When the algorithm guesses the model T, it additionally guesses the set annot(t;) for 
every node v in T, and for each node it guesses if it is back-symmetric and if it is reflexive. 

The procedure Verify-Consistency (w) performs the following check: For a node v on 
the i-th level of T, an not (i) is required to contain all subformulas and negated subformulas 
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For connected components Cj of all prereq (ip) , guess if it appears as homomorphic image in T 
Guess the model T 
Verify that 4> ^ annot (0) 
current :— w 

while w not marked done do 

Lot preq be the predecessor of current (if current ^ w) 
Verify-Horn (current) 

if There is Ox ^ annot (current) not marked done then 
if current is reflexive and x G annot (current) then 

Mark ()x done in annot (current) 
end if 

if current is back-symmetric and x ^ annot (preq) then 

Mark x done 
end if 

Let next be next unvisited successor of current 
Verify that x £ annot (next) 
current := next 
else 

Verify-Consistency (current) 
if current is reflexive then 

Verify that annot (current) does not contain x and -lOx for any x 
end if 

if current is back-symmetric then 

Verify that annot (current) does not contain -lOx for X ^ annot (preq) 
end if 

Verify that annot (preq) does not contain -lOx for some x £ annot (current) 
Mark current as done 

In preq, mark <>x done for all x & annot (current) 

current := preq 
end if 
end while 
Accept 



Fig. 11. Algorithm Satisfiability 
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of cf) which have modal depth of at most md (0) — i, and are true at v. Hence, annot (current) 
must contain exactly one of -ix or x for each relevant x, and additionally, if Xi A X2 S 
annot (current) , then both xi and X2 need to be members as well. Similarly, if xi V X2 is a 
member, then at least one of them must be an element of annot (current) . 

The procedure Verify-Horn (v) works as follows: If there is a clause (p in ip with 
cone {(fi) = {x, x) for x ^ prereq {(p) such that all connected components of prereq (ip) can be 
mapped homomorphically into T, then Verify-Horn (v) ensures that v is reflexive. Note 
that all other Horn clauses in ip satisfy that cone ((p) = {x,y) for some x,y G prereq ((^). 
For these clauses, the procedure considers the subgraph Gy consisting of all nodes of T 
which can be reached from v in at most S undirected steps (note that a node can be 
reached in at most S steps in T if and only if it can be reached in at most S steps in 
^strict) - For every connected component C of prereq {(f) , Verify-Horn (w) tests all functions 
a: C ^ Gy. If one of these a is a homomorphism, then Verify-Horn (?;) rejects, if the 
algorithm guessed in the beginning that C cannot be mapped homomorphically into T. 
If there is one clause ip in tp such that all connected components of prereq (ip) can be 
mapped into T (according to the Ust of these possibilities maintained by the algorithm) and 
Verify-Horn (v) detected a homomorphism a : Cpreroq(cp) ^ Gy (where Cp^crcqitp) is the 
connected component of prereq {(p) containing the nodes from the conclusion edge of tp) for 
some (p with cone (ip) = {x, y) such that v G {a{x),a{y)} , then Verify-Horn (v) rejects if 
{a{x), a(y)) is not an edge in Gy. 

We prove that the algorithm is correct. First note that for each connected component G 
of some prereq (yi) for a clause (p in t/j, if there is a homomorphism a: C ^ T, then there 
is a node v E T such that a: C ^ Gy is a. homomorphism. This holds because all edges 
in T are already present in the strict tree Tstrict or are symmetric or reflexive edges, and 
the homomorphic image of C under the homomorphism a is a connected component of T, 
and the maximal distance of the nodes in this image is S (recall that this is the maximal 
cardinality of a connected component in any prereq {ip)). Therefore, we can assume that for 
each connected component C of some prereq {(p) , if it can be homomorphically mapped into 
T, then SATISFIABILITY guessed this correctly in the beginning in every accepting run of 
the algorithm (an incorrect guess would, due to the observation just made, be detected by 
Verify-Horn (v) for some node v). 

Now assume that the algorithm accepts. We claim that the model obtained from the 
annotated model guessed by the algorithm where a variable x is true at a world v if and 
only if X e annot {v) is a model of both the modal formula ^ (at the root- world w) and of the 
Horn formula ip. By the checks the algorithm performs, it can easily be verified by induction 
on the level of the nodes (corresponding to the modal depth of the involved formulas) that 
for every world v in T, every formula in annot (t;) is satisfied at v. Since cp G annot (w) , 
this implies that T,w \= (f>. The base case for the induction is cleax, since for worlds v in 
the level md (</>) , annot (t;) only contains literals, and the algorithm ensures that annot (t;) 
is propositionally consistent. Since for each subformula x of </) of relevant modal depth, 
annot (w) contains exactly one of x and -iX) the induction hypothesis can be applied in the 
relevant cases. Note that the algorithm also checks consistency for the cases in which we 
have reflexive and/or symmetric edges. 

It remains to show that T is also a model of the flrst-order formula "ip. Assume that 
this is not the case. Then there exists some clause (p in tp which is not satisfied in T. 
In particular, this implies that prereq (i^) can be homomorphically mapped into T, and 
since edges (T) C edges {types-list{T)) , this imphes that prereq ((^) can be homomorphically 
mapped into a types-list-trcc. Since we assumed that Horn-Classification does not return 
NP on input tp, we know that none of the NP-conditions from Horn- Classification are 
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satisfied. Since none of the NP-conditions from Horn-Classification occur, we know that 
(p has conclusion edge cone (i^) = (x^y) for variables x,y where x = y or x,y ^ prereq(i^). 
First assume that x = y. Since prereq((^) can be mapped homomorphically into T, the 
procedure Verify-Horn (.) required every node in T to be reflexive, hence if is satisfied 
in T. Not assume that x,y € prereq((^). Since none of the NP-conditions apply, we know 
that x and y are connected with an undirected path in prereq((^). In particular, they lie 
in the same connected component Cpi.crcq(ip) of prereq((^). Since ip is not satisfied in T, 
this implies by Proposition 4.3 that there are nodes u,v £ T such that {u,v) is not an 
edge in T, there is no edge {u,v) in T, and there is a homomorphism a: prereq((^) — > T 
such that a(x) = u, and a{y) = v. Due to the above, we know that a: Cp^cicq(ip) ^ 
is a homomorphism. Therefore, the homomorphism a was found by Verify-Horn [u) and 
Verify-Horn (v). Since prereq (tp) can be homomorphically mapped into T, we know that 
every connected component C of prereq ((^) can be homomorphically mapped into T, and 
due to the above, we know that the Satisfiability guessed this correctly in an accepting 
run of the algorithm. Therefore, the procedure Verify-Horn (.) ensured that {u,v) is an 
edge in T, a contradiction. 

Now assume that (/) is K(-0)-satisfiable. Due to the remarks at the beginning of the proof, 
we know that in this case, there exists a K(-!/))-model T such that T is an edge-extension of 
a strict tree, and edges (T) C edges {types-list{T)). Therefore the algorithm can guess this 
model and verify that it satisfies both </) and ij). 

It remains to prove that the algorithm can be implemented in nondeterministic poly- 
nomial space. The result then follows, since due to a classic result by Savitch [Sav73], 
NPSPACE = PSPACE. In order to implement the algorithm using only polynomial spac;e. 
the main change needed compared to the version stated in Figure 11 is how much of the 
guessed model T is stored in memory at a given time. 

The NPSPACE-implementation does not guess the entire model T at the start of the 

algorithm, but guesses each node the moment it is first accessed (either by being created 
explicitly, or by being explored as an S'-step neighbor of another node by the procedure 
Verify-Horn (.)). It removes the node from memory at a time when it will not be accessed 
anymore in the remaining execution of the algorithm. 

To be precise, the algorithm at all times keeps in its memory the node current and all of 
its predecessors, and all nodes which can be reached from these in at most S steps in the 
tree Tstrict- Since in T, every node has at most |sf ((^)| successors in the next level, and S is 
a constant, this is a polynomial number of nodes. 

We now need to prove that no necessary information is removed from memory, i.e., 
that no node is first created, then deleted and then accessed again. Note that from the 
construction of the algorithm, it is obvious that new nodes are visited in a depth-first order. 

Therefore assume that this happens for some node node. Note that any node which gets 
deleted from memory is not reachable from the root world w in at most S steps, and therefore 
node is at some level i > in the tree Tstnc- Let v\ be the node for which node was visited 
for the first time, i.e., the first node visited such that node <E G^^ (recall that G^^ is the set 
of nodes which can be reached from vi in at most S undirected steps in T). Since node is 
deleted from memory and required again later, there is some node V2 such that node cannot 
be reached from any predecessor of in at most S steps, and a node W3 such that node 
can be reached from in at most S steps. Let a be the (uniquely determined) common 
predecessor of node and V2 with a maximal level in the tree. Then, since a is a predecessor 
of V2, we know that node ^ Ga- Hence, node is at least 5* levels below a. Since Tsirict is a 
tree, any node t such that node G Gj must therefore be a successor of a. In particular, 
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is a successor of a. This is a contradiction, because Satisfiability traverses the tree in 
depth-first-seaxch, and hence does not leave the sub-tree with root a and re-enters it later. 

Therefore we have shown that it is sufficient to keep a polynomial number of nodes in 
storage, and which nodes to keep can be decided by an easy pattern. Hence it follows that 
the algorithm can indeed by implemented in nondeterministic polynomial space as required, 
concluding the proof. □ 



4.8 Applications 

Theorem 4.17 and 4.34 can be used to classify the complexity of a lot of concrete logics, but 
they also imply more general results, for which we will give two examples. For once, recall 
that Ladner proved that all normal modal logics KL such that S4 (the logic over all transitive 
and reflexive frames) is an extension of KL give rise to a PSPACE-hard satisfiability problem. 
The following corollary shows that this result is optimal in the sense that every universal 
Horn logic which is a "proper extension" of S4 in the way that they imply the conditions of 
S4, already gives an NP-solvable satisfiability problem. 

Corollary 4.35. Let tp be a universal Horn formula such that "0 implies <^rcfl A (ptrans • Then 
either K{tp) = S4, or K(^) has the polynomial-size model property and K(^)-SAT € NP. 

Proof. By the prerequisites, we know that ijj is equivalent to ■0 A (^rcfl A (^trans- Hence we can, 
without loss of generality, assume that ^refl and tptrans appear as clauses in ^/i. 

If every clause in ij; is satisfied in every transitive and reflexive tree, then every modal 
formula (p which is satisflable in a transitive and reflexive tree is K(?/')-satisflable. Note that 
a special case of Theorem 4.33 gives the result that every S4-satisfiable formula also is 
satisfiable in a reflexive and transitive tree. Therefore, every S4-satisflable formula is also 
K('!/))-satisflable, and hence, every K(0)-validity is also S4- valid. Therefore, S4 is an extension 
of K(^/;). Since by Proposition 2.3, K{tp) is an extension of S4 = K((^refl A <^trans)) this implies 
that K(V;) = S4. 

Therefore, we can assume that tjj is not satisfied in every refiexive and transitive tree. Now 
let types-list be as determined by Horn- Classification on input ijj. Since i^refl smd <^trans 
are clauses in -!/>, we know that ref 1 and trans^ are elements of types-list. If all elements in 
types-list are of the form ref 1 or trans*^, then we know (since fc-transitivity is imphed by 2- 
transitivity) , since ip is satisfied on every types-list-tree, that ijj is satisfied in every refiexive 
and transitive tree, a contradiction. Therefore, we now that symm G types-list, and hence 
by construction, Horn- CLASSIFICATION reports NP- membership. Since by Theorem 4.17 
the output of the algorithm is correct, we know that K(t/))-SAT S NP, and K(^) has the 
polynomial-size model property, as claimed. □ 

We further can show a PSPACE upper bound for all universal Horn logics which are 
extensions of the logic T, and hence, from Theorem 4.17, conclude that these are all either 
solvable in NP (and thus NP-complete if they are consistent), or PSPACE-complete. 

Corollary 4.36. Let 'ip he a universal Llorn formula such that •ip implies <^refl- Then K(V;)- 
SAT e PSPACE. 

Proof. Assume without loss of generality that Horn-Classification determines the logic 
K(i/') to have a PSPACE-hard satisfiability problem, otherwise the theorem holds trivially, 
since NP C PSPACE. If ip implies <ptrans) then the result follows from Corollary 4.35. Hence 
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assume that this is not the case. Note that in reflexive graphs, fc-transitivity is equivalent to 
transitivity. Also note that the conditions requiring a node to have a certain depth or height 
in a graph are always satisfied in a reflexive graph, because nodes here have inflnite depth 
and height. Therefore, if ^jj implies a formula of the form V^p,x>q,y>r fo'^ some 2 < k and 
some p,q,r G N, then tp also implies tptrans, and due to the above, we can assume that this is 
not the case. Thus, types-list as determined by Horn-Classification contains no condition 
of the form trans'^ for any k gN. The complexity result now follows from Theorem 4.34. □ 

In a similar way, we can prove that all universal Horn logics which imply a variant of 
symmetry give rise to a satisfiability problem in PSPACE. A noteworthy difference in the 
prerequisites of Corollary 4.36 and Corollary 4.37 is that the former requires the refiexivity 
condition to be implied by the formula tp, while the latter only needs a "near-symmetry" - 
condition as detected by Horn-Classification. 

Corollary 4.37. Let ip be a universal Horn formula such that Horn-Classification adds 
symm to types-list on input 'ij). Then K('^)-SAT e PSPACE. In particular, any universal Horn 
logic which is an extension of B has a satisfiability problem solvable in PSPACE. 

Proof. If K(V')-SAT e NP, the claim trivially holds. Hence, since Horn-Classification is 

correct due to Theorem 4.17, we can assume that Horn-Classification returns PSPACE- 
hard, and symm G types-list, where types-list is as determined by Horn-Classification. 
Since Horn-Classification does not report NP, we know from its construction that 
trans*^ ^ types-list for all A; e N. Hence the complexity result follows from Theorem 4.34. □ 

5 Conclusion and Future Research 

We analyzed the complexity of modal logics defined by universal Horn formulas, covering 
many well-known logics. We showed that the non-trivial satisfiability problems for these 
logics are either NP-complete or PSPACE-hard, and gave an easy criterion to recognize 
these cases. Our results directly imply that (unless NP = PSPACE) such a logic has a 
satisfiability problem in NP if and only if it has the polynomial-size model property. We also 
demonstrated that a wide class of the considered logics has a satisfiability problem solvable 
in PSPACE. 

Open questions include determining complexity upper bounds for the satisfiability prob- 
lems for all modal logics defined by universal Horn formulas. We strongly conjecture 
that all of these are decidable, and consider it possible that all of these problems are 
in PSPACE. A successful way to establish upper complexity bounds is the guarded frag- 
ment [AvBN98,Gra99]. This does not seem to be applicable to our logics, since it cannot be 
used for transitive logics, and we obtain PSPACE-upper bounds for all of our logics except 
those involving a variant of transitivity. 

The next major open challenges are generalizing our results to formulas not in the Horn 
class, and allowing arbitrary quantific;ation. Initial results show that even when considering 
only universal formulas over the frame language, undecidable logics appear. An interesting 
enrichment of Horn clauses is to allow the equality relation. Preliminary results indicate 
that Corollary 4.29 holds for this more general case as well. 
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